What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

[Closed] Possibly Infected?

5 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1
My computer's been starting up extremely slow recently. Even if I end all of the unnecessary processes (Aim, Stylexp) it continues to go slowly for about 5 minutes.



Logfile of HijackThis v1.99.1
Scan saved at 3:17:13 PM, on 10/23/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\arservice.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\TVersity\Media Server\MediaServer.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\ARPWRMSG.EXE
C:\WINDOWS\eHome\ehmsas.exe
C:\HP\KBD\KBD.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEA.EXE
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\AIM\aim.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\uTorrent\uTorrent.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Winamp\winamp.exe
C:\Program Files\Last.fm\LastFM.exe
C:\Program Files\Mozilla Firefox\firefox.exe
c:\windows\system\hpsysdrv.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\AcroRd32Info.exe
C:\Documents and Settings\Compaq_Administrator\Desktop\Random\hijack this\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a…&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a…&pf=desktop
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a…&pf=desktop
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\1.bin\MWSSRCAS.DLL
O2 - BHO: MyWebSearch Search Assistant BHO - {00A6FAF1-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\1.bin\MWSSRCAS.DLL
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: mwsBar BHO - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~4\Office12\GRA8E1~1.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: TGTSoft Explorer Toolbar Changer - {C333CF63-767F-4831-94AC-E683D962C63C} - C:\Program Files\TGTSoft\StyleXP\TGT_BHO.dll
O2 - BHO: FlashFXP Helper for Internet Explorer - {E5A1691B-D188-4419-AD02-90002030B8EE} - C:\PROGRA~1\FlashFXP\IEFlash.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [AlwaysReady Power Message APP] ARPWRMSG.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run
O4 - HKLM\..\Run: [Reminder] "C:\Windows\Creator\Remind_XP.exe"
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [ISUSPM Startup] c:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\wianmpa.exe
O4 - HKLM\..\Run: [EPSON Stylus CX4200 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEA.EXE /P26 "EPSON Stylus CX4200 Series" /O6 "USB001" /M "Stylus CX4200"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [MyWebSearch Plugin] rundll32 C:\PROGRA~1\MYWEBS~1\bar\1.bin\M3PLUGIN.DLL,UPF
O4 - HKLM\..\Run: [My Web Search Bar] rundll32 C:\PROGRA~1\MYWEBS~1\bar\1.bin\MWSBAR.DLL,S
O4 - HKLM\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033 -noicon
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [STYLEXP] C:\Program Files\TGTSoft\StyleXP\StyleXP.exe -Hide
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [µTorrent] "C:\Program Files\uTorrent\utorrent.exe"
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"
O4 - HKCU\..\Run: [QdrModule10] "C:\Program Files\QdrModule\QdrModule10.exe"
O4 - HKCU\..\Run: [Scbu] "C:\DOCUME~1\COMPAQ~1\APPLIC~1\WNSXS~1\regsvr32.exe" -vt yazb
O4 - HKCU\..\Run: [Mga] C:\WINDOWS\s?mbols\s?anregw.exe
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_9 -reboot 1
O4 - HKCU\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/…?p=ZKxdm173YYUS
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Internet Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Internet Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\program files\bonjour\mdnsnsp.dll
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/images/nocache/f…etup1.0.1.1.cab
O16 - DPF: {5F5F9FB8-878E-4455-95E0-F64B2314288A} (ijjiPlugin2 Class) - http://gamedownload.ijjimax.com/gamedownlo…Plugin11USA.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe…nt.cab56907.cab
O16 - DPF: {CD995117-98E5-4169-9920-6C12D4C0B548} (HGPlugin9USA Class) - http://gamedownload.ijjimax.com/gamedownlo…GPlugin9USA.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineS…er.cab56986.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~4\Office12\GR99D3~1.DLL
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
O20 - Winlogon Notify: Fly - C:\WINDOWS\SYSTEM32\smart.dll
O20 - Winlogon Notify: Love - C:\WINDOWS\SYSTEM32\LoveFly.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: InstallShield Licensing Service - Macrovision - C:\Program Files\Common Files\InstallShield Shared\Service\InstallShield Licensing Service.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: My Web Search Service (MyWebSearchService) - MyWebSearch.com - C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwssvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
O23 - Service: StyleXPService - Unknown owner - C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe (file missing)
O23 - Service: TVersityMediaServer - Unknown owner - C:\Program Files\TVersity\Media Server\MediaServer.exe


I've gotten help here before, but I forgot that accounts password since I got a new computer about 3 years ago and this is the first time I've had a problem with really anything.
Post #2
Hello

Download ComboFix from one of these locations:

Link 1
Link 2
Link 3


* IMPORTANT !!! Save ComboFix.exe to your Desktop


  • Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools

  • Double click on ComboFix.exe & follow the prompts.

  • As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.

  • Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.

**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.


[external image: Posted Image]



Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:

[external image: Posted Image]


Click on Yes, to continue scanning for malware.

When finished, it shall produce a log for you. Please include the C:\ComboFix.txt in your next reply.
Post #3
ComboFix 08-10-23.03 - Compaq_Administrator 2008-10-23 20:42:10.3 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.482 [GMT -4:00]
Running from: C:\Documents and Settings\[removed]\Desktop\ComboFix.exe
* Created a new restore point
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\Compaq_Administrator\Application Data\FunWebProducts
C:\Documents and Settings\Compaq_Administrator\Local Settings\Temporary Internet Files\ijjistarter_verinfo.dat
C:\Program Files\FunWebProducts
C:\Program Files\FunWebProducts\ScreenSaver\Images\60D88243.urr
C:\Program Files\FunWebProducts\Shared\Cache\CursorManiaBtn.html
C:\Program Files\FunWebProducts\Shared\Cache\SmileyCentralBtn.html
C:\Program Files\internet explorer\msimg32.dll
C:\Program Files\MyWebSearch
C:\Program Files\MyWebSearch\bar\1.bin\F3BKGERR.JPG
C:\Program Files\MyWebSearch\bar\1.bin\F3CJPEG.DLL
C:\Program Files\MyWebSearch\bar\1.bin\F3DTACTL.DLL
C:\Program Files\MyWebSearch\bar\1.bin\F3HISTSW.DLL
C:\Program Files\MyWebSearch\bar\1.bin\F3HTMLMU.DLL
C:\Program Files\MyWebSearch\bar\1.bin\F3HTTPCT.DLL
C:\Program Files\MyWebSearch\bar\1.bin\F3IMSTUB.DLL
C:\Program Files\MyWebSearch\bar\1.bin\F3POPSWT.DLL
C:\Program Files\MyWebSearch\bar\1.bin\F3PSSAVR.SCR
C:\Program Files\MyWebSearch\bar\1.bin\F3REPROX.DLL
C:\Program Files\MyWebSearch\bar\1.bin\F3RESTUB.DLL
C:\Program Files\MyWebSearch\bar\1.bin\F3SCHMON.EXE
C:\Program Files\MyWebSearch\bar\1.bin\F3SCRCTR.DLL
C:\Program Files\MyWebSearch\bar\1.bin\F3SPACER.WMV
C:\Program Files\MyWebSearch\bar\1.bin\F3WALLPP.DAT
C:\Program Files\MyWebSearch\bar\1.bin\F3WPHOOK.DLL
C:\Program Files\MyWebSearch\bar\1.bin\FWPBUDDY.PNG
C:\Program Files\MyWebSearch\bar\1.bin\M3FFXTBR.JAR
C:\Program Files\MyWebSearch\bar\1.bin\M3FFXTBR.MANIFEST
C:\Program Files\MyWebSearch\bar\1.bin\M3HIGHIN.EXE
C:\Program Files\MyWebSearch\bar\1.bin\M3HTML.DLL
C:\Program Files\MyWebSearch\bar\1.bin\M3IDLE.DLL
C:\Program Files\MyWebSearch\bar\1.bin\M3IMPIPE.EXE
C:\Program Files\MyWebSearch\bar\1.bin\M3MEDINT.EXE
C:\Program Files\MyWebSearch\bar\1.bin\M3MSG.DLL
C:\Program Files\MyWebSearch\bar\1.bin\M3NTSTBR.JAR
C:\Program Files\MyWebSearch\bar\1.bin\M3NTSTBR.MANIFEST
C:\Program Files\MyWebSearch\bar\1.bin\M3OUTLCN.DLL
C:\Program Files\MyWebSearch\bar\1.bin\M3PLUGIN.DLL
C:\Program Files\MyWebSearch\bar\1.bin\M3SKIN.DLL
C:\Program Files\MyWebSearch\bar\1.bin\M3SKPLAY.EXE
C:\Program Files\MyWebSearch\bar\1.bin\M3SLSRCH.EXE
C:\Program Files\MyWebSearch\bar\1.bin\M3SRCHMN.EXE
C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL
C:\Program Files\MyWebSearch\bar\1.bin\MWSOEMON.EXE
C:\Program Files\MyWebSearch\bar\1.bin\MWSOEPLG.DLL
C:\Program Files\MyWebSearch\bar\1.bin\MWSOESTB.DLL
C:\Program Files\MyWebSearch\bar\1.bin\MWSSVC.EXE
C:\Program Files\MyWebSearch\bar\1.bin\NPMYWEBS.DLL
C:\Program Files\MyWebSearch\bar\Avatar\COMMON.F3S
C:\Program Files\MyWebSearch\bar\Cache\60D0EA1C
C:\Program Files\MyWebSearch\bar\Cache\60D0F547
C:\Program Files\MyWebSearch\bar\Cache\60D0F8C2.bin
C:\Program Files\MyWebSearch\bar\Cache\60D0F95E.bin
C:\Program Files\MyWebSearch\bar\Cache\60D0F9DB.bin
C:\Program Files\MyWebSearch\bar\Cache\60D0FAC5.bin
C:\Program Files\MyWebSearch\bar\Cache\60D0FBA0.bin
C:\Program Files\MyWebSearch\bar\Cache\files.ini
C:\Program Files\MyWebSearch\bar\Game\CHECKERS.F3S
C:\Program Files\MyWebSearch\bar\Game\CHESS.F3S
C:\Program Files\MyWebSearch\bar\Game\REVERSI.F3S
C:\Program Files\MyWebSearch\bar\History\search3
C:\Program Files\MyWebSearch\bar\icons\CM.ICO
C:\Program Files\MyWebSearch\bar\icons\MFC.ICO
C:\Program Files\MyWebSearch\bar\icons\PSS.ICO
C:\Program Files\MyWebSearch\bar\icons\SMILEY.ICO
C:\Program Files\MyWebSearch\bar\icons\WB.ICO
C:\Program Files\MyWebSearch\bar\icons\ZWINKY.ICO
C:\Program Files\MyWebSearch\bar\Message\COMMON.F3S
C:\Program Files\MyWebSearch\bar\Notifier\COMMON.F3S
C:\Program Files\MyWebSearch\bar\Notifier\DOG.F3S
C:\Program Files\MyWebSearch\bar\Notifier\FISH.F3S
C:\Program Files\MyWebSearch\bar\Notifier\KUNGFU.F3S
C:\Program Files\MyWebSearch\bar\Notifier\LIFEGARD.F3S
C:\Program Files\MyWebSearch\bar\Notifier\MAID.F3S
C:\Program Files\MyWebSearch\bar\Notifier\MAILBOX.F3S
C:\Program Files\MyWebSearch\bar\Notifier\OPERA.F3S
C:\Program Files\MyWebSearch\bar\Notifier\ROBOT.F3S
C:\Program Files\MyWebSearch\bar\Notifier\SEDUCT.F3S
C:\Program Files\MyWebSearch\bar\Notifier\SURFER.F3S
C:\Program Files\MyWebSearch\bar\Settings\prevcfg2.htm
C:\Program Files\MyWebSearch\bar\Settings\s_pid.dat
C:\Program Files\MyWebSearch\bar\Settings\setting2.htm
C:\Program Files\MyWebSearch\bar\Settings\settings.dat
C:\Program Files\MyWebSearch\SrchAstt\1.bin\MWSSRCAS.DLL
C:\WINDOWS\IE4 Error Log.txt
C:\WINDOWS\system32\a.exe
C:\WINDOWS\system32\disk.dll
C:\WINDOWS\system32\f3PSSavr.scr
C:\WINDOWS\system32\Memman.vxd
C:\WINDOWS\system32\skinboxer43.dll

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

——-\Legacy_MYWEBSEARCHSERVICE
——-\Service_MyWebSearchService


((((((((((((((((((((((((( Files Created from 2008-09-24 to 2008-10-24 )))))))))))))))))))))))))))))))
.

2008-10-23 15:40 . 2008-10-23 15:41 d——– C:\Program Files\Minefield
2008-10-22 09:00 . 2008-10-22 09:34 d——– C:\Program Files\Hot Keyboard Pro
2008-10-09 00:44 . 2008-10-09 00:52 d——– C:\Program Files\BlackIsle
2008-09-25 17:57 . 2008-09-25 17:57 d——– C:\Program Files\LimeWire
2008-09-25 17:57 . 2008-10-15 11:24 d——– C:\Documents and Settings\Compaq_Administrator\Application Data\LimeWire

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-10-24 00:50 ——— d—–w C:\Documents and Settings\Compaq_Administrator\Application Data\uTorrent
2008-10-24 00:42 ——— d—–w C:\Program Files\StepMania
2008-10-22 01:47 ——— d—–w C:\Documents and Settings\Compaq_Administrator\Application Data\U3
2008-10-09 04:54 52,736 —-a-w C:\WINDOWS\ipuninst.exe
2008-10-08 20:48 ——— d—–w C:\Program Files\MSN Messenger
2008-10-07 08:57 ——— d—–w C:\Documents and Settings\All Users\Application Data\Microsoft Help
2008-09-24 02:07 ——— d–h–r C:\Documents and Settings\Compaq_Administrator\Application Data\SecuROM
2008-09-19 07:24 ——— d—–w C:\Documents and Settings\Compaq_Administrator\Application Data\SPORE
2008-09-19 07:16 ——— d–h–w C:\Program Files\InstallShield Installation Information
2008-09-19 07:16 ——— d—–w C:\Program Files\Electronic Arts
2008-09-13 01:14 ——— d—–w C:\Documents and Settings\Compaq_Administrator\Application Data\Hamachi
2008-08-30 22:39 ——— d–h–w C:\Documents and Settings\Compaq_Administrator\Application Data\ijjigame
2008-08-30 05:42 ——— d—–w C:\Documents and Settings\All Users\Application Data\IJJIGame
2008-08-28 10:04 333,056 —-a-w C:\WINDOWS\system32\drivers\srv.sys
2008-08-27 21:12 ——— d—–w C:\Program Files\ffdshow
2008-07-29 02:54 15,700,197 —-a-w C:\Program Files\Toribash-2.5.rar
2008-04-25 03:35 1,336 —-a-w C:\Documents and Settings\Compaq_Administrator\Application Data\wklnhst.dat
2006-12-19 03:09 1,167,360 —-a-w C:\Documents and Settings\Compaq_Administrator\HldsUpdateTool.exe
2006-05-03 09:06 163,328 –sha-r C:\WINDOWS\system32\flvDX.dll
2007-02-21 10:47 31,232 –sha-r C:\WINDOWS\system32\msfDX.dll
.

((((((((((((((((((((((((((((( snapshot@2008-01-05_12.00.22.78 )))))))))))))))))))))))))))))))))))))))))
.
+ 2007-11-30 12:39:22 17,272 —-a-w C:\WINDOWS\$hf_mig$\KB938464\spmsg.dll
+ 2007-11-30 12:39:22 231,288 —-a-w C:\WINDOWS\$hf_mig$\KB938464\spuninst.exe
+ 2007-11-30 12:39:22 26,488 —-a-w C:\WINDOWS\$hf_mig$\KB938464\update\spcustom.dll
+ 2007-11-30 11:20:44 755,576 —-a-w C:\WINDOWS\$hf_mig$\KB938464\update\update.exe
+ 2007-11-30 12:39:22 382,840 —-a-w C:\WINDOWS\$hf_mig$\KB938464\update\updspapi.dll
+ 2007-10-30 16:53:32 360,832 —-a-w C:\WINDOWS\$hf_mig$\KB941644\SP2QFE\tcpip.sys
+ 2007-03-06 01:22:36 14,048 —-a-w C:\WINDOWS\$hf_mig$\KB941644\spmsg.dll
+ 2007-03-06 01:22:41 213,216 —-a-w C:\WINDOWS\$hf_mig$\KB941644\spuninst.exe
+ 2007-03-06 01:22:34 22,752 —-a-w C:\WINDOWS\$hf_mig$\KB941644\update\spcustom.dll
+ 2007-03-06 01:22:59 716,000 —-a-w C:\WINDOWS\$hf_mig$\KB941644\update\update.exe
+ 2007-03-06 01:23:51 371,424 —-a-w C:\WINDOWS\$hf_mig$\KB941644\update\updspapi.dll
+ 2008-03-19 09:40:27 1,845,888 —-a-w C:\WINDOWS\$hf_mig$\KB941693\SP2QFE\win32k.sys
+ 2007-03-06 01:22:36 14,048 —-a-w C:\WINDOWS\$hf_mig$\KB941693\spmsg.dll
+ 2007-03-06 01:22:41 213,216 —-a-w C:\WINDOWS\$hf_mig$\KB941693\spuninst.exe
+ 2007-03-06 01:22:34 22,752 —-a-w C:\WINDOWS\$hf_mig$\KB941693\update\spcustom.dll
+ 2007-03-06 01:22:59 716,000 —-a-w C:\WINDOWS\$hf_mig$\KB941693\update\update.exe
+ 2007-03-06 01:23:51 371,424 —-a-w C:\WINDOWS\$hf_mig$\KB941693\update\updspapi.dll
+ 2007-12-04 18:29:10 551,936 —-a-w C:\WINDOWS\$hf_mig$\KB943055\SP2QFE\oleaut32.dll
+ 2007-03-06 01:22:36 14,048 —-a-w C:\WINDOWS\$hf_mig$\KB943055\spmsg.dll
+ 2007-03-06 01:22:41 213,216 —-a-w C:\WINDOWS\$hf_mig$\KB943055\spuninst.exe
+ 2007-03-06 01:22:34 22,752 —-a-w C:\WINDOWS\$hf_mig$\KB943055\update\spcustom.dll
+ 2007-03-06 01:22:59 716,000 —-a-w C:\WINDOWS\$hf_mig$\KB943055\update\update.exe
+ 2007-03-06 01:23:51 371,424 —-a-w C:\WINDOWS\$hf_mig$\KB943055\update\updspapi.dll
+ 2007-11-07 09:50:47 727,040 —-a-w C:\WINDOWS\$hf_mig$\KB943485\SP2QFE\lsasrv.dll
+ 2007-03-06 01:22:36 14,048 —-a-w C:\WINDOWS\$hf_mig$\KB943485\spmsg.dll
+ 2007-03-06 01:22:41 213,216 —-a-w C:\WINDOWS\$hf_mig$\KB943485\spuninst.exe
+ 2007-03-06 01:22:34 22,752 —-a-w C:\WINDOWS\$hf_mig$\KB943485\update\spcustom.dll
+ 2007-03-06 01:22:59 716,000 —-a-w C:\WINDOWS\$hf_mig$\KB943485\update\update.exe
+ 2007-03-06 01:23:51 371,424 —-a-w C:\WINDOWS\$hf_mig$\KB943485\update\updspapi.dll
+ 2007-12-18 14:32:13 450,560 —-a-w C:\WINDOWS\$hf_mig$\KB944338\SP2QFE\jscript.dll
+ 2007-12-18 14:32:13 417,792 —-a-w C:\WINDOWS\$hf_mig$\KB944338\SP2QFE\vbscript.dll
+ 2007-03-06 01:22:36 14,048 —-a-w C:\WINDOWS\$hf_mig$\KB944338\spmsg.dll
+ 2007-03-06 01:22:41 213,216 —-a-w C:\WINDOWS\$hf_mig$\KB944338\spuninst.exe
+ 2007-03-06 01:22:34 22,752 —-a-w C:\WINDOWS\$hf_mig$\KB944338\update\spcustom.dll
+ 2007-03-06 01:22:59 716,000 —-a-w C:\WINDOWS\$hf_mig$\KB944338\update\update.exe
+ 2007-03-06 01:23:51 371,424 —-a-w C:\WINDOWS\$hf_mig$\KB944338\update\updspapi.dll
+ 2008-02-20 05:19:35 147,968 —-a-w C:\WINDOWS\$hf_mig$\KB945553\SP2QFE\dnsapi.dll
+ 2008-02-20 18:49:36 45,568 —-a-w C:\WINDOWS\$hf_mig$\KB945553\SP2QFE\dnsrslvr.dll
+ 2007-03-06 01:22:36 14,048 —-a-w C:\WINDOWS\$hf_mig$\KB945553\spmsg.dll
+ 2007-03-06 01:22:41 213,216 —-a-w C:\WINDOWS\$hf_mig$\KB945553\spuninst.exe
+ 2007-03-06 01:22:34 22,752 —-a-w C:\WINDOWS\$hf_mig$\KB945553\update\spcustom.dll
+ 2007-03-06 01:22:59 716,000 —-a-w C:\WINDOWS\$hf_mig$\KB945553\update\update.exe
+ 2007-03-06 01:23:51 371,424 —-a-w C:\WINDOWS\$hf_mig$\KB945553\update\updspapi.dll
+ 2007-12-18 09:38:59 179,712 —-a-w C:\WINDOWS\$hf_mig$\KB946026\SP2QFE\mrxdav.sys
+ 2007-03-06 01:22:36 14,048 —-a-w C:\WINDOWS\$hf_mig$\KB946026\spmsg.dll
+ 2007-03-06 01:22:41 213,216 —-a-w C:\WINDOWS\$hf_mig$\KB946026\spuninst.exe
+ 2007-03-06 01:22:34 22,752 —-a-w C:\WINDOWS\$hf_mig$\KB946026\update\spcustom.dll
+ 2007-03-06 01:22:59 716,000 —-a-w C:\WINDOWS\$hf_mig$\KB946026\update\update.exe
+ 2007-03-06 01:23:51 371,424 —-a-w C:\WINDOWS\$hf_mig$\KB946026\update\updspapi.dll
+ 2008-05-02 13:30:08 83,968 —-a-w C:\WINDOWS\$hf_mig$\KB946648\SP2QFE\msgsc.dll
+ 2008-05-02 14:01:49 83,968 —-a-w C:\WINDOWS\$hf_mig$\KB946648\SP3GDR\msgsc.dll
+ 2008-05-02 13:42:10 83,968 —-a-w C:\WINDOWS\$hf_mig$\KB946648\SP3QFE\msgsc.dll
+ 2007-11-30 12:39:22 17,272 —-a-w C:\WINDOWS\$hf_mig$\KB946648\spmsg.dll
+ 2007-11-30 12:39:22 231,288 —-a-w C:\WINDOWS\$hf_mig$\KB946648\spuninst.exe
+ 2007-11-30 12:39:22 26,488 —-a-w C:\WINDOWS\$hf_mig$\KB946648\update\spcustom.dll
+ 2007-11-30 11:20:44 755,576 —-a-w C:\WINDOWS\$hf_mig$\KB946648\update\update.exe
+ 2007-11-30 12:39:22 382,840 —-a-w C:\WINDOWS\$hf_mig$\KB946648\update\updspapi.dll
+ 2008-02-20 06:52:43 282,624 —-a-w C:\WINDOWS\$hf_mig$\KB948590\SP2QFE\gdi32.dll
+ 2007-03-06 01:22:36 14,048 —-a-w C:\WINDOWS\$hf_mig$\KB948590\spmsg.dll
+ 2007-03-06 01:22:41 213,216 —-a-w C:\WINDOWS\$hf_mig$\KB948590\spuninst.exe
+ 2007-03-06 01:22:34 22,752 —-a-w C:\WINDOWS\$hf_mig$\KB948590\update\spcustom.dll
+ 2007-03-06 01:22:59 716,000 —-a-w C:\WINDOWS\$hf_mig$\KB948590\update\update.exe
+ 2007-03-06 01:23:51 371,424 —-a-w C:\WINDOWS\$hf_mig$\KB948590\update\updspapi.dll
+ 2007-03-06 01:22:33 14,048 —-a-w C:\WINDOWS\$hf_mig$\KB948881\spmsg.dll
+ 2007-03-06 01:22:39 213,216 —-a-w C:\WINDOWS\$hf_mig$\KB948881\spuninst.exe
+ 2007-03-06 01:22:31 22,752 —-a-w C:\WINDOWS\$hf_mig$\KB948881\update\spcustom.dll
+ 2007-03-06 01:22:56 716,000 —-a-w C:\WINDOWS\$hf_mig$\KB948881\update\update.exe
+ 2007-03-06 01:23:47 371,424 —-a-w C:\WINDOWS\$hf_mig$\KB948881\update\updspapi.dll
+ 2008-01-23 04:56:21 554,008 —-a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\dao360.dll
+ 2007-12-10 12:41:11 518,944 —-a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msexch40.dll
+ 2007-12-10 12:41:11 326,432 —-a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msexcl40.dll
+ 2007-12-10 12:41:11 1,516,568 —-a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msjet40.dll
+ 2007-12-10 12:41:11 355,112 —-a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msjetol1.dll
+ 2008-03-27 07:39:13 151,583 —-a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msjint40.dll
+ 2007-12-10 12:41:12 60,192 —-a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msjter40.dll
+ 2007-12-10 12:41:12 248,608 —-a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msjtes40.dll
+ 2007-12-10 12:41:12 219,936 —-a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msltus40.dll
+ 2007-12-10 12:41:12 355,104 —-a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\mspbde40.dll
+ 2007-12-10 12:41:13 432,928 —-a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msrd2x40.dll
+ 2007-12-10 12:41:13 322,336 —-a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msrd3x40.dll
+ 2007-12-10 12:41:13 559,904 —-a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msrepl40.dll
+ 2007-12-10 12:41:13 264,992 —-a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\mstext40.dll
+ 2007-12-10 12:41:13 838,432 —-a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\mswdat10.dll
+ 2007-12-10 12:41:14 621,344 —-a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\mswstr10.dll
+ 2007-12-10 12:41:14 355,104 —-a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msxbde40.dll
+ 2007-03-06 01:22:36 14,048 —-a-w C:\WINDOWS\$hf_mig$\KB950749\spmsg.dll
+ 2007-03-06 01:22:41 213,216 —-a-w C:\WINDOWS\$hf_mig$\KB950749\spuninst.exe
+ 2007-03-06 01:22:34 22,752 —-a-w C:\WINDOWS\$hf_mig$\KB950749\update\spcustom.dll
+ 2007-03-06 01:22:59 716,000 —-a-w C:\WINDOWS\$hf_mig$\KB950749\update\update.exe
+ 2007-03-06 01:23:51 371,424 —-a-w C:\WINDOWS\$hf_mig$\KB950749\update\updspapi.dll
+ 2008-04-21 06:44:29 3,066,880 —-a-w C:\WINDOWS\$hf_mig$\KB950759\SP3GDR\mshtml.dll
+ 2008-04-21 06:44:29 666,112 —-a-w C:\WINDOWS\$hf_mig$\KB950759\SP3GDR\wininet.dll
+ 2008-04-21 06:24:01 3,067,392 —-a-w C:\WINDOWS\$hf_mig$\KB950759\SP3QFE\mshtml.dll
+ 2008-04-21 06:24:02 666,624 —-a-w C:\WINDOWS\$hf_mig$\KB950759\SP3QFE\wininet.dll
+ 2007-11-30 12:39:22 17,272 —-a-w C:\WINDOWS\$hf_mig$\KB950759\spmsg.dll
+ 2007-11-30 12:39:22 231,288 —-a-w C:\WINDOWS\$hf_mig$\KB950759\spuninst.exe
+ 2007-11-30 12:39:22 26,488 —-a-w C:\WINDOWS\$hf_mig$\KB950759\update\spcustom.dll
+ 2007-11-30 12:39:22 755,576 —-a-w C:\WINDOWS\$hf_mig$\KB950759\update\update.exe
+ 2007-11-30 12:39:22 382,840 —-a-w C:\WINDOWS\$hf_mig$\KB950759\update\updspapi.dll
+ 2007-11-30 12:39:22 17,272 —-a-w C:\WINDOWS\$hf_mig$\KB950760\spmsg.dll
+ 2007-11-30 12:39:22 231,288 —-a-w C:\WINDOWS\$hf_mig$\KB950760\spuninst.exe
+ 2007-11-30 12:39:22 26,488 —-a-w C:\WINDOWS\$hf_mig$\KB950760\update\spcustom.dll
+ 2007-11-30 12:39:22 755,576 —-a-w C:\WINDOWS\$hf_mig$\KB950760\update\update.exe
+ 2007-11-30 12:39:22 382,840 —-a-w C:\WINDOWS\$hf_mig$\KB950760\update\updspapi.dll
+ 2008-05-08 12:14:51 203,008 —-a-w C:\WINDOWS\$hf_mig$\KB950762\SP2QFE\rmcast.sys
+ 2008-05-08 14:02:52 203,136 —-a-w C:\WINDOWS\$hf_mig$\KB950762\SP3GDR\rmcast.sys
+ 2008-05-08 13:58:17 203,136 —-a-w C:\WINDOWS\$hf_mig$\KB950762\SP3QFE\rmcast.sys
+ 2007-11-30 12:39:22 17,272 —-a-w C:\WINDOWS\$hf_mig$\KB950762\spmsg.dll
+ 2007-11-30 12:39:22 231,288 —-a-w C:\WINDOWS\$hf_mig$\KB950762\spuninst.exe
+ 2007-11-30 12:39:22 26,488 —-a-w C:\WINDOWS\$hf_mig$\KB950762\update\spcustom.dll
+ 2007-11-30 12:39:22 755,576 —-a-w C:\WINDOWS\$hf_mig$\KB950762\update\update.exe
+ 2007-11-30 12:39:22 382,840 —-a-w C:\WINDOWS\$hf_mig$\KB950762\update\updspapi.dll
+ 2008-07-07 20:06:43 253,952 —-a-w C:\WINDOWS\$hf_mig$\KB950974\SP2QFE\es.dll
+ 2008-07-07 20:26:58 253,952 —-a-w C:\WINDOWS\$hf_mig$\KB950974\SP3GDR\es.dll
+ 2008-07-07 20:23:18 253,952 —-a-w C:\WINDOWS\$hf_mig$\KB950974\SP3QFE\es.dll
+ 2007-11-30 12:39:22 17,272 —-a-w C:\WINDOWS\$hf_mig$\KB950974\spmsg.dll
+ 2007-11-30 12:39:22 231,288 —-a-w C:\WINDOWS\$hf_mig$\KB950974\spuninst.exe
+ 2007-11-30 12:39:22 26,488 —-a-w C:\WINDOWS\$hf_mig$\KB950974\update\spcustom.dll
+ 2007-11-30 12:39:18 755,576 —-a-w C:\WINDOWS\$hf_mig$\KB950974\update\update.exe
+ 2007-11-30 12:39:19 382,840 —-a-w C:\WINDOWS\$hf_mig$\KB950974\update\updspapi.dll
+ 2008-04-11 18:39:39 683,520 —-a-w C:\WINDOWS\$hf_mig$\KB951066\SP2QFE\inetcomm.dll
+ 2008-04-11 19:04:26 691,712 —-a-w C:\WINDOWS\$hf_mig$\KB951066\SP3GDR\inetcomm.dll
+ 2008-04-12 04:22:26 691,712 —-a-w C:\WINDOWS\$hf_mig$\KB951066\SP3QFE\inetcomm.dll
+ 2007-11-30 12:39:22 17,272 —-a-w C:\WINDOWS\$hf_mig$\KB951066\spmsg.dll
+ 2007-11-30 12:39:22 231,288 —-a-w C:\WINDOWS\$hf_mig$\KB951066\spuninst.exe
+ 2007-11-30 12:39:22 26,488 —-a-w C:\WINDOWS\$hf_mig$\KB951066\update\spcustom.dll
+ 2007-12-03 15:25:31 755,576 —-a-w C:\WINDOWS\$hf_mig$\KB951066\update\update.exe
+ 2007-11-30 12:39:22 382,840 —-a-w C:\WINDOWS\$hf_mig$\KB951066\update\updspapi.dll
+ 2008-07-14 11:03:00 62,976 —-a-w C:\WINDOWS\$hf_mig$\KB951072-v2\SP2QFE\tzchange.exe
+ 2008-07-11 12:42:28 62,976 —-a-w C:\WINDOWS\$hf_mig$\KB951072-v2\SP3GDR\tzchange.exe
+ 2008-07-11 12:51:51 62,976 —-a-w C:\WINDOWS\$hf_mig$\KB951072-v2\SP3QFE\tzchange.exe
+ 2007-11-30 11:18:51 17,272 —-a-w C:\WINDOWS\$hf_mig$\KB951072-v2\spmsg.dll
+ 2007-11-30 11:18:51 231,288 —-a-w C:\WINDOWS\$hf_mig$\KB951072-v2\spuninst.exe
+ 2007-11-30 11:18:51 26,488 —-a-w C:\WINDOWS\$hf_mig$\KB951072-v2\update\spcustom.dll
+ 2007-11-30 12:39:22 755,576 —-a-w C:\WINDOWS\$hf_mig$\KB951072-v2\update\update.exe
+ 2007-11-30 12:39:22 382,840 —-a-w C:\WINDOWS\$hf_mig$\KB951072-v2\update\updspapi.dll
+ 2008-06-13 09:52:16 272,128 —-a-w C:\WINDOWS\$hf_mig$\KB951376-v2\SP2QFE\bthport.sys
+ 2008-06-13 11:05:51 272,128 —-a-w C:\WINDOWS\$hf_mig$\KB951376-v2\SP3GDR\bthport.sys
+ 2008-06-13 11:27:43 272,128 —-a-w C:\WINDOWS\$hf_mig$\KB951376-v2\SP3QFE\bthport.sys
+ 2007-11-30 11:18:51 17,272 —-a-w C:\WINDOWS\$hf_mig$\KB951376-v2\spmsg.dll
+ 2007-11-30 11:18:51 231,288 —-a-w C:\WINDOWS\$hf_mig$\KB951376-v2\spuninst.exe
+ 2007-11-30 11:18:51 26,488 —-a-w C:\WINDOWS\$hf_mig$\KB951376-v2\update\spcustom.dll
+ 2007-11-30 11:18:51 755,576 —-a-w C:\WINDOWS\$hf_mig$\KB951376-v2\update\update.exe
+ 2007-11-30 11:18:51 382,840 —-a-w C:\WINDOWS\$hf_mig$\KB951376-v2\update\updspapi.dll
+ 2008-04-14 11:00:16 272,128 —-a-w C:\WINDOWS\$hf_mig$\KB951376\SP2QFE\bthport.sys
+ 2008-04-14 12:30:49 272,128 —-a-w C:\WINDOWS\$hf_mig$\KB951376\SP3GDR\bthport.sys
+ 2008-04-14 12:36:35 272,128 —-a-w C:\WINDOWS\$hf_mig$\KB951376\SP3QFE\bthport.sys
+ 2007-11-30 11:18:51 17,272 —-a-w C:\WINDOWS\$hf_mig$\KB951376\spmsg.dll
+ 2007-11-30 11:18:51 231,288 —-a-w C:\WINDOWS\$hf_mig$\KB951376\spuninst.exe
+ 2007-11-30 11:18:51 26,488 —-a-w C:\WINDOWS\$hf_mig$\KB951376\update\spcustom.dll
+ 2007-11-30 11:18:51 755,576 —-a-w C:\WINDOWS\$hf_mig$\KB951376\update\update.exe
+ 2007-11-30 11:18:51 382,840 —-a-w C:\WINDOWS\$hf_mig$\KB951376\update\updspapi.dll
+ 2008-05-07 05:12:40 1,288,192 —-a-w C:\WINDOWS\$hf_mig$\KB951698\SP3GDR\quartz.dll
+ 2008-05-07 05:04:15 1,288,192 —-a-w C:\WINDOWS\$hf_mig$\KB951698\SP3QFE\quartz.dll
+ 2007-11-30 11:18:51 17,272 —-a-w C:\WINDOWS\$hf_mig$\KB951698\spmsg.dll
+ 2007-11-30 11:18:51 231,288 —-a-w C:\WINDOWS\$hf_mig$\KB951698\spuninst.exe
+ 2007-11-30 11:18:51 26,488 —-a-w C:\WINDOWS\$hf_mig$\KB951698\update\spcustom.dll
+ 2007-11-30 12:39:22 755,576 —-a-w C:\WINDOWS\$hf_mig$\KB951698\update\update.exe
+ 2007-11-30 12:39:22 382,840 —-a-w C:\WINDOWS\$hf_mig$\KB951698\update\updspapi.dll
+ 2006-08-16 12:08:32 100,352 —-a-w C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\6to4svc.dll
+ 2008-06-20 10:44:08 138,368 —-a-w C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\afd.sys
+ 2008-06-20 17:36:11 147,968 —-a-w C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\dnsapi.dll
+ 2008-06-20 17:36:11 245,248 —-a-w C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\mswsock.dll
+ 2008-06-20 10:44:42 360,960 —-a-w C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\tcpip.sys
+ 2008-06-20 09:32:39 225,920 —-a-w C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\tcpip6.sys
+ 2008-06-20 11:40:08 138,496 —-a-w C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\afd.sys
+ 2008-06-20 17:46:57 147,968 —-a-w C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\dnsapi.dll
+ 2008-06-20 17:46:57 245,248 —-a-w C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\mswsock.dll
+ 2008-06-20 11:51:12 361,600 —-a-w C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\tcpip.sys
+ 2008-06-20 11:08:27 225,856 —-a-w C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\tcpip6.sys
+ 2008-06-20 11:48:03 138,496 —-a-w C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\afd.sys
+ 2008-06-20 17:43:05 147,968 —-a-w C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\dnsapi.dll
+ 2008-06-20 17:43:05 245,248 —-a-w C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\mswsock.dll
+ 2008-06-20 11:59:02 361,600 —-a-w C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip.sys
+ 2008-06-20 11:16:44 225,856 —-a-w C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip6.sys
+ 2007-11-30 12:39:22 17,272 —-a-w C:\WINDOWS\$hf_mig$\KB951748\spmsg.dll
+ 2007-11-30 12:39:22 231,288 —-a-w C:\WINDOWS\$hf_mig$\KB951748\spuninst.exe
+ 2007-11-30 12:39:22 26,488 —-a-w C:\WINDOWS\$hf_mig$\KB951748\update\spcustom.dll
+ 2007-11-30 12:39:18 755,576 —-a-w C:\WINDOWS\$hf_mig$\KB951748\update\update.exe
+ 2007-11-30 12:39:19 382,840 —-a-w C:\WINDOWS\$hf_mig$\KB951748\update\updspapi.dll
+ 2008-05-01 15:04:00 331,776 —-a-w C:\WINDOWS\$hf_mig$\KB952287\SP2QFE\msadce.dll
+ 2008-05-01 14:33:02 331,776 —-a-w C:\WINDOWS\$hf_mig$\KB952287\SP3GDR\msadce.dll
+ 2008-05-01 14:38:05 331,776 —-a-w C:\WINDOWS\$hf_mig$\KB952287\SP3QFE\msadce.dll
+ 2007-11-30 11:18:51 17,272 —-a-w C:\WINDOWS\$hf_mig$\KB952287\spmsg.dll
+ 2007-11-30 11:18:51 231,288 —-a-w C:\WINDOWS\$hf_mig$\KB952287\spuninst.exe
+ 2007-11-30 11:18:51 26,488 —-a-w C:\WINDOWS\$hf_mig$\KB952287\update\spcustom.dll
+ 2007-11-30 11:18:51 755,576 —-a-w C:\WINDOWS\$hf_mig$\KB952287\update\update.exe
+ 2007-11-30 11:18:51 382,840 —-a-w C:\WINDOWS\$hf_mig$\KB952287\update\updspapi.dll
+ 2008-06-24 16:28:00 74,240 —-a-w C:\WINDOWS\$hf_mig$\KB952954\SP2QFE\mscms.dll
+ 2008-06-24 16:43:16 74,240 —-a-w C:\WINDOWS\$hf_mig$\KB952954\SP3GDR\mscms.dll
+ 2008-06-24 16:53:10 74,240 —-a-w C:\WINDOWS\$hf_mig$\KB952954\SP3QFE\mscms.dll
+ 2007-11-30 12:39:22 17,272 —-a-w C:\WINDOWS\$hf_mig$\KB952954\spmsg.dll
+ 2007-11-30 12:39:22 231,288 —-a-w C:\WINDOWS\$hf_mig$\KB952954\spuninst.exe
+ 2007-11-30 12:39:22 26,488 —-a-w C:\WINDOWS\$hf_mig$\KB952954\update\spcustom.dll
+ 2007-11-30 12:39:22 755,576 —-a-w C:\WINDOWS\$hf_mig$\KB952954\update\update.exe
+ 2007-11-30 12:39:22 382,840 —-a-w C:\WINDOWS\$hf_mig$\KB952954\update\updspapi.dll
+ 2007-11-30 12:39:22 17,272 —-a-w C:\WINDOWS\$hf_mig$\KB953356\spmsg.dll
+ 2007-11-30 12:39:22 231,288 —-a-w C:\WINDOWS\$hf_mig$\KB953356\spuninst.exe
+ 2008-05-28 12:01:41 26,624 —-a-w C:\WINDOWS\$hf_mig$\KB953356\update\ippmcust.dll
+ 2007-11-30 12:39:22 26,488 —-a-w C:\WINDOWS\$hf_mig$\KB953356\update\spcustom.dll
+ 2007-11-30 12:39:22 755,576 —-a-w C:\WINDOWS\$hf_mig$\KB953356\update\update.exe
+ 2007-11-30 12:39:22 382,840 —-a-w C:\WINDOWS\$hf_mig$\KB953356\update\updspapi.dll
+ 2008-06-23 15:09:27 3,067,392 —-a-w C:\WINDOWS\$hf_mig$\KB953838\SP3GDR\mshtml.dll
+ 2008-06-26 08:15:29 1,499,136 —-a-w C:\WINDOWS\$hf_mig$\KB953838\SP3GDR\shdocvw.dll
+ 2008-06-26 08:15:30 619,520 —-a-w C:\WINDOWS\$hf_mig$\KB953838\SP3GDR\urlmon.dll
+ 2008-06-23 15:09:27 666,112 —-a-w C:\WINDOWS\$hf_mig$\KB953838\SP3GDR\wininet.dll
+ 2008-06-25 04:24:48 3,067,904 —-a-w C:\WINDOWS\$hf_mig$\KB953838\SP3QFE\mshtml.dll
+ 2008-06-26 08:00:52 1,499,136 —-a-w C:\WINDOWS\$hf_mig$\KB953838\SP3QFE\shdocvw.dll
+ 2008-06-26 08:00:52 619,520 —-a-w C:\WINDOWS\$hf_mig$\KB953838\SP3QFE\urlmon.dll
+ 2008-06-23 14:54:47 666,624 —-a-w C:\WINDOWS\$hf_mig$\KB953838\SP3QFE\wininet.dll
+ 2007-11-30 12:39:22 17,272 —-a-w C:\WINDOWS\$hf_mig$\KB953838\spmsg.dll
+ 2007-11-30 12:39:22 231,288 —-a-w C:\WINDOWS\$hf_mig$\KB953838\spuninst.exe
+ 2007-11-30 12:39:22 26,488 —-a-w C:\WINDOWS\$hf_mig$\KB953838\update\spcustom.dll
+ 2007-11-30 12:39:18 755,576 —-a-w C:\WINDOWS\$hf_mig$\KB953838\update\update.exe
+ 2007-11-30 12:39:19 382,840 —-a-w C:\WINDOWS\$hf_mig$\KB953838\update\updspapi.dll
+ 2007-11-30 12:39:22 17,272 —-a-w C:\WINDOWS\$hf_mig$\KB953839\spmsg.dll
+ 2007-11-30 12:39:22 231,288 —-a-w C:\WINDOWS\$hf_mig$\KB953839\spuninst.exe
+ 2007-11-30 12:39:22 26,488 —-a-w C:\WINDOWS\$hf_mig$\KB953839\update\spcustom.dll
+ 2007-11-30 11:18:51 755,576 —-a-w C:\WINDOWS\$hf_mig$\KB953839\update\update.exe
+ 2007-11-30 11:18:51 382,840 —-a-w C:\WINDOWS\$hf_mig$\KB953839\update\updspapi.dll
+ 2008-08-20 05:30:53 3,067,904 —-a-w C:\WINDOWS\$hf_mig$\KB956390\SP3GDR\mshtml.dll
+ 2008-08-20 05:30:51 1,499,136 —-a-w C:\WINDOWS\$hf_mig$\KB956390\SP3GDR\shdocvw.dll
+ 2008-08-20 05:30:52 619,520 —-a-w C:\WINDOWS\$hf_mig$\KB956390\SP3GDR\urlmon.dll
+ 2008-08-20 05:30:51 666,112 —-a-w C:\WINDOWS\$hf_mig$\KB956390\SP3GDR\wininet.dll
+ 2008-08-20 04:58:54 3,067,904 —-a-w C:\WINDOWS\$hf_mig$\KB956390\SP3QFE\mshtml.dll
+ 2008-08-20 04:58:47 1,499,136 —-a-w C:\WINDOWS\$hf_mig$\KB956390\SP3QFE\shdocvw.dll
+ 2008-08-20 04:58:50 620,032 —-a-w C:\WINDOWS\$hf_mig$\KB956390\SP3QFE\urlmon.dll
+ 2008-08-20 04:58:48 666,624 —-a-w C:\WINDOWS\$hf_mig$\KB956390\SP3QFE\wininet.dll
+ 2007-11-30 11:18:51 17,272 —-a-w C:\WINDOWS\$hf_mig$\KB956390\spmsg.dll
+ 2007-11-30 11:18:51 231,288 —-a-w C:\WINDOWS\$hf_mig$\KB956390\spuninst.exe
+ 2007-11-30 11:18:51 26,488 —-a-w C:\WINDOWS\$hf_mig$\KB956390\update\spcustom.dll
+ 2007-11-30 12:39:22 755,576 —-a-w C:\WINDOWS\$hf_mig$\KB956390\update\update.exe
+ 2007-11-30 12:39:22 382,840 —-a-w C:\WINDOWS\$hf_mig$\KB956390\update\updspapi.dll
+ 2007-11-30 12:39:22 231,288 -c—-w C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe
+ 2007-11-30 12:39:22 382,840 -c—-w C:\WINDOWS\$NtUninstallKB938464$\spuninst\updspapi.dll
+ 2007-03-06 01:22:41 213,216 -c—-w C:\WINDOWS\$NtUninstallKB941644$\spuninst\spuninst.exe
+ 2007-03-06 01:23:51 371,424 -c—-w C:\WINDOWS\$NtUninstallKB941644$\spuninst\updspapi.dll
+ 2006-04-20 11:51:50 359,808 -c—-w C:\WINDOWS\$NtUninstallKB941644$\tcpip.sys
+ 2007-03-06 01:22:41 213,216 -c—-w C:\WINDOWS\$NtUninstallKB941693$\spuninst\spuninst.exe
+ 2007-03-06 01:23:51 371,424 -c—-w C:\WINDOWS\$NtUninstallKB941693$\spuninst\updspapi.dll
+ 2007-03-08 13:47:48 1,843,584 -c—-w C:\WINDOWS\$NtUninstallKB941693$\win32k.sys
+ 2007-05-17 11:28:05 549,376 -c—-w C:\WINDOWS\$NtUninstallKB943055$\oleaut32.dll
+ 2007-03-06 01:22:41 213,216 -c—-w C:\WINDOWS\$NtUninstallKB943055$\spuninst\spuninst.exe
+ 2007-03-06 01:23:51 371,424 -c—-w C:\WINDOWS\$NtUninstallKB943055$\spuninst\updspapi.dll
+ 2006-08-17 12:28:27 721,920 -c—-w C:\WINDOWS\$NtUninstallKB943485$\lsasrv.dll
+ 2007-03-06 01:22:41 213,216 -c—-w C:\WINDOWS\$NtUninstallKB943485$\spuninst\spuninst.exe
+ 2007-03-06 01:23:51 371,424 -c—-w C:\WINDOWS\$NtUninstallKB943485$\spuninst\updspapi.dll
+ 2007-11-14 07:26:56 450,560 -c—-w C:\WINDOWS\$NtUninstallKB944338$\jscript.dll
+ 2007-03-06 01:22:41 213,216 -c—-w C:\WINDOWS\$NtUninstallKB944338$\spuninst\spuninst.exe
+ 2007-03-06 01:23:51 371,424 -c—-w C:\WINDOWS\$NtUninstallKB944338$\spuninst\updspapi.dll
+ 2004-08-09 21:00:00 417,792 -c—-w C:\WINDOWS\$NtUninstallKB944338$\vbscript.dll
+ 2007-10-11 05:57:29 1,024,000 -c—-w C:\WINDOWS\$NtUninstallKB944533$\browseui.dll
+ 2007-10-11 05:57:29 151,040 -c—-w C:\WINDOWS\$NtUninstallKB944533$\cdfview.dll
+ 2007-10-11 05:57:30 1,054,208 -c—-w C:\WINDOWS\$NtUninstallKB944533$\danim.dll
+ 2007-10-11 05:57:30 357,888 -c—-w C:\WINDOWS\$NtUninstallKB944533$\dxtmsft.dll
+ 2007-10-11 05:57:30 205,824 -c—-w C:\WINDOWS\$NtUninstallKB944533$\dxtrans.dll
+ 2007-10-11 05:57:30 55,808 -c—-w C:\WINDOWS\$NtUninstallKB944533$\extmgr.dll
+ 2007-10-10 10:48:23 18,432 -c—-w C:\WINDOWS\$NtUninstallKB944533$\iedw.exe
+ 2007-10-11 05:57:31 251,904 -c—-w C:\WINDOWS\$NtUninstallKB944533$\iepeers.dll
+ 2007-10-11 05:57:31 96,256 -c—-w C:\WINDOWS\$NtUninstallKB944533$\inseng.dll
+ 2007-10-11 05:57:31 16,384 -c—-w C:\WINDOWS\$NtUninstallKB944533$\jsproxy.dll
+ 2007-10-30 09:55:21 3,065,856 -c—-w C:\WINDOWS\$NtUninstallKB944533$\mshtml.dll
+ 2007-10-11 05:57:36 449,024 -c—-w C:\WINDOWS\$NtUninstallKB944533$\mshtmled.dll
+ 2007-10-11 05:57:36 146,432 -c—-w C:\WINDOWS\$NtUninstallKB944533$\msrating.dll
+ 2007-10-11 05:57:37 532,480 -c—-w C:\WINDOWS\$NtUninstallKB944533$\mstime.dll
+ 2007-10-11 05:57:37 39,424 -c—-w C:\WINDOWS\$NtUninstallKB944533$\pngfilt.dll
+ 2007-10-11 05:57:39 1,498,112 -c—-w C:\WINDOWS\$NtUninstallKB944533$\shdocvw.dll
+ 2007-10-11 05:57:40 474,112 -c—-w C:\WINDOWS\$NtUninstallKB944533$\shlwapi.dll
+ 2007-03-06 01:22:41 213,216 -c—-w C:\WINDOWS\$NtUninstallKB944533$\spuninst\spuninst.exe
+ 2007-03-06 01:23:51 371,424 -c—-w C:\WINDOWS\$NtUninstallKB944533$\spuninst\updspapi.dll
+ 2007-10-11 05:57:40 617,984 -c—-w C:\WINDOWS\$NtUninstallKB944533$\urlmon.dll
+ 2007-10-11 05:57:41 666,112 -c—-w C:\WINDOWS\$NtUninstallKB944533$\wininet.dll
+ 2007-10-29 10:04:03 350,720 -c—-w C:\WINDOWS\$NtUninstallKB944533$\xpsp3res.dll
+ 2006-06-26 17:37:10 148,480 -c—-w C:\WINDOWS\$NtUninstallKB945553$\dnsapi.dll
+ 2004-08-09 21:00:00 45,568 -c—-w C:\WINDOWS\$NtUninstallKB945553$\dnsrslvr.dll
+ 2007-03-06 01:22:41 213,216 -c—-w C:\WINDOWS\$NtUninstallKB945553$\spuninst\spuninst.exe
+ 2007-03-06 01:23:51 371,424 -c—-w C:\WINDOWS\$NtUninstallKB945553$\spuninst\updspapi.dll
+ 2004-08-09 21:00:00 181,248 -c—-w C:\WINDOWS\$NtUninstallKB946026$\mrxdav.sys
+ 2007-03-06 01:22:41 213,216 -c—-w C:\WINDOWS\$NtUninstallKB946026$\spuninst\spuninst.exe
+ 2007-03-06 01:23:51 371,424 -c—-w C:\WINDOWS\$NtUninstallKB946026$\spuninst\updspapi.dll
+ 2004-08-04 00:06:34 82,944 -c—-w C:\WINDOWS\$NtUninstallKB946648$\msgsc.dll
+ 2007-11-30 12:39:22 231,288 -c—-w C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe
+ 2007-11-30 12:39:22 382,840 -c—-w C:\WINDOWS\$NtUninstallKB946648$\spuninst\updspapi.dll
+ 2007-12-07 00:44:30 1,024,000 -c—-w C:\WINDOWS\$NtUninstallKB947864$\browseui.dll
+ 2007-12-07 00:44:30 151,040 -c—-w C:\WINDOWS\$NtUninstallKB947864$\cdfview.dll
+ 2007-12-07 00:44:32 1,054,208 -c—-w C:\WINDOWS\$NtUninstallKB947864$\danim.dll
+ 2007-12-07 00:44:33 357,888 -c—-w C:\WINDOWS\$NtUninstallKB947864$\dxtmsft.dll
+ 2007-12-07 00:44:33 205,824 -c—-w C:\WINDOWS\$NtUninstallKB947864$\dxtrans.dll
+ 2007-12-07 00:44:33 55,808 -c—-w C:\WINDOWS\$NtUninstallKB947864$\extmgr.dll
+ 2007-12-06 10:05:52 18,432 -c—-w C:\WINDOWS\$NtUninstallKB947864$\iedw.exe
+ 2007-12-07 00:44:33 251,904 -c—-w C:\WINDOWS\$NtUninstallKB947864$\iepeers.dll
+ 2007-12-07 00:44:33 96,256 -c—-w C:\WINDOWS\$NtUninstallKB947864$\inseng.dll
+ 2007-12-07 00:44:33 16,384 -c—-w C:\WINDOWS\$NtUninstallKB947864$\jsproxy.dll
+ 2007-12-07 00:44:35 3,066,368 -c—-w C:\WINDOWS\$NtUninstallKB947864$\mshtml.dll
+ 2007-12-07 00:44:36 449,024 -c—-w C:\WINDOWS\$NtUninstallKB947864$\mshtmled.dll
+ 2007-12-07 00:44:36 146,432 -c—-w C:\WINDOWS\$NtUninstallKB947864$\msrating.dll
+ 2007-12-07 00:44:36 532,480 -c—-w C:\WINDOWS\$NtUninstallKB947864$\mstime.dll
+ 2007-12-07 00:44:36 39,424 -c—-w C:\WINDOWS\$NtUninstallKB947864$\pngfilt.dll
+ 2007-12-07 00:44:37 1,499,136 -c—-w C:\WINDOWS\$NtUninstallKB947864$\shdocvw.dll
+ 2007-12-07 00:44:38 474,112 -c—-w C:\WINDOWS\$NtUninstallKB947864$\shlwapi.dll
+ 2007-03-06 01:22:41 213,216 -c—-w C:\WINDOWS\$NtUninstallKB947864$\spuninst\spuninst.exe
+ 2007-03-06 01:23:51 371,424 -c—-w C:\WINDOWS\$NtUninstallKB947864$\spuninst\updspapi.dll
+ 2007-12-07 00:44:39 617,984 -c—-w C:\WINDOWS\$NtUninstallKB947864$\urlmon.dll
+ 2007-12-07 00:44:39 666,112 -c—-w C:\WINDOWS\$NtUninstallKB947864$\wininet.dll
+ 2007-12-06 09:38:31 350,720 -c—-w C:\WINDOWS\$NtUninstallKB947864$\xpsp3res.dll
+ 2007-06-19 13:31:19 282,112 -c—-w C:\WINDOWS\$NtUninstallKB948590$\gdi32.dll
+ 2007-03-06 01:22:41 213,216 -c—-w C:\WINDOWS\$NtUninstallKB948590$\spuninst\spuninst.exe
+ 2007-03-06 01:23:51 371,424 -c—-w C:\WINDOWS\$NtUninstallKB948590$\spuninst\updspapi.dll
+ 2007-03-06 01:22:39 213,216 -c—-w C:\WINDOWS\$NtUninstallKB948881$\spuninst\spuninst.exe
+ 2007-03-06 01:23:47 371,424 -c—-w C:\WINDOWS\$NtUninstallKB948881$\spuninst\updspapi.dll
+ 2004-08-09 21:00:00 561,179 -c—-w C:\WINDOWS\$NtUninstallKB950749$\dao360.dll
+ 2004-08-09 21:00:00 512,029 -c—-w C:\WINDOWS\$NtUninstallKB950749$\msexch40.dll
+ 2004-08-09 21:00:00 319,517 -c—-w C:\WINDOWS\$NtUninstallKB950749$\msexcl40.dll
+ 2004-08-09 21:00:00 1,507,356 -c—-w C:\WINDOWS\$NtUninstallKB950749$\msjet40.dll
+ 2004-08-09 21:00:00 358,976 -c—-w C:\WINDOWS\$NtUninstallKB950749$\msjetol1.dll
+ 2004-08-10 04:00:00 358,976 -c—-w C:\WINDOWS\$NtUninstallKB950749$\msjetoledb40.dll
+ 2004-08-09 21:00:00 151,583 -c—-w C:\WINDOWS\$NtUninstallKB950749$\msjint40.dll
+ 2004-08-09 21:00:00 53,279 -c—-w C:\WINDOWS\$NtUninstallKB950749$\msjter40.dll
+ 2004-08-09 21:00:00 241,693 -c—-w C:\WINDOWS\$NtUninstallKB950749$\msjtes40.dll
+ 2004-08-09 21:00:00 213,023 -c—-w C:\WINDOWS\$NtUninstallKB950749$\msltus40.dll
+ 2004-08-09 21:00:00 348,189 -c—-w C:\WINDOWS\$NtUninstallKB950749$\mspbde40.dll
+ 2004-08-09 21:00:00 421,919 -c—-w C:\WINDOWS\$NtUninstallKB950749$\msrd2x40.dll
+ 2004-08-09 21:00:00 315,423 -c—-w C:\WINDOWS\$NtUninstallKB950749$\msrd3x40.dll
+ 2004-08-09 21:00:00 552,989 -c—-w C:\WINDOWS\$NtUninstallKB950749$\msrepl40.dll
+ 2004-08-09 21:00:00 258,077 -c—-w C:\WINDOWS\$NtUninstallKB950749$\mstext40.dll
+ 2004-08-09 21:00:00 831,519 -c—-w C:\WINDOWS\$NtUninstallKB950749$\mswdat10.dll
+ 2004-08-09 21:00:00 614,429 -c—-w C:\WINDOWS\$NtUninstallKB950749$\mswstr10.dll
+ 2004-08-09 21:00:00 348,189 -c—-w C:\WINDOWS\$NtUninstallKB950749$\msxbde40.dll
+ 2007-03-06 01:22:41 213,216 -c—-w C:\WINDOWS\$NtUninstallKB950749$\spuninst\spuninst.exe
+ 2007-03-06 01:23:51 371,424 -c—-w C:\WINDOWS\$NtUninstallKB950749$\spuninst\updspapi.dll
+ 2008-02-16 09:32:03 1,024,000 -c—-w C:\WINDOWS\$NtUninstallKB950759$\browseui.dll
+ 2008-02-16 09:32:03 151,040 -c—-w C:\WINDOWS\$NtUninstallKB950759$\cdfview.dll
+ 2008-02-16 09:32:03 1,054,208 -c—-w C:\WINDOWS\$NtUninstallKB950759$\danim.dll
+ 2008-02-16 09:32:04 357,888 -c—-w C:\WINDOWS\$NtUninstallKB950759$\dxtmsft.dll
+ 2008-02-16 09:32:04 205,312 -c—-w C:\WINDOWS\$NtUninstallKB950759$\dxtrans.dll
+ 2008-02-16 09:32:04 55,808 -c—-w C:\WINDOWS\$NtUninstallKB950759$\extmgr.dll
+ 2008-02-15 09:07:53 18,432 -c—-w C:\WINDOWS\$NtUninstallKB950759$\iedw.exe
+ 2008-02-16 09:32:04 251,904 -c—-w C:\WINDOWS\$NtUninstallKB950759$\iepeers.dll
+ 2008-02-16 09:32:04 96,256 -c—-w C:\WINDOWS\$NtUninstallKB950759$\inseng.dll
+ 2008-02-16 09:32:04 16,384 -c—-w C:\WINDOWS\$NtUninstallKB950759$\jsproxy.dll
+ 2008-02-16 09:32:06 3,066,880 -c—-w C:\WINDOWS\$NtUninstallKB950759$\mshtml.dll
+ 2008-02-16 09:32:06 449,024 -c—-w C:\WINDOWS\$NtUninstallKB950759$\mshtmled.dll
+ 2008-02-16 09:32:06 146,432 -c—-w C:\WINDOWS\$NtUninstallKB950759$\msrating.dll
+ 2008-02-16 09:32:07 532,480 -c—-w C:\WINDOWS\$NtUninstallKB950759$\mstime.dll
+ 2008-02-16 09:32:07 39,424 -c—-w C:\WINDOWS\$NtUninstallKB950759$\pngfilt.dll
+ 2008-02-16 09:32:08 1,499,136 -c—-w C:\WINDOWS\$NtUninstallKB950759$\shdocvw.dll
+ 2008-02-16 09:32:08 474,112 -c—-w C:\WINDOWS\$NtUninstallKB950759$\shlwapi.dll
+ 2007-11-30 12:39:22 231,288 -c—-w C:\WINDOWS\$NtUninstallKB950759$\spuninst\spuninst.exe
+ 2007-11-30 12:39:22 382,840 -c—-w C:\WINDOWS\$NtUninstallKB950759$\spuninst\updspapi.dll
+ 2008-02-16 09:32:08 618,496 -c—-w C:\WINDOWS\$NtUninstallKB950759$\urlmon.dll
+ 2008-02-16 09:32:09 666,112 -c—-w C:\WINDOWS\$NtUninstallKB950759$\wininet.dll
+ 2008-02-15 09:06:21 351,744 -c—-w C:\WINDOWS\$NtUninstallKB950759$\xpsp3res.dll
+ 2007-11-30 12:39:22 231,288 -c—-w C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe
+ 2007-11-30 12:39:22 382,840 -c—-w C:\WINDOWS\$NtUninstallKB950760$\spuninst\updspapi.dll
+ 2006-07-13 08:48:58 202,240 -c—-w C:\WINDOWS\$NtUninstallKB950762$\rmcast.sys
+ 2007-11-30 12:39:22 231,288 -c—-w C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe
+ 2007-11-30 12:39:22 382,840 -c—-w C:\WINDOWS\$NtUninstallKB950762$\spuninst\updspapi.dll
+ 2005-07-26 04:39:45 243,200 -c—-w C:\WINDOWS\$NtUninstallKB950974$\es.dll
+ 2007-11-30 12:39:22 231,288 -c—-w C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe
+ 2007-11-30 12:39:19 382,840 -c—-w C:\WINDOWS\$NtUninstallKB950974$\spuninst\updspapi.dll
+ 2007-08-21 06:15:44 683,520 -c—-w C:\WINDOWS\$NtUninstallKB951066$\inetcomm.dll
+ 2007-11-30 12:39:22 231,288 -c—-w C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe
+ 2007-11-30 12:39:22 382,840 -c—-w C:\WINDOWS\$NtUninstallKB951066$\spuninst\updspapi.dll
+ 2007-11-30 11:18:51 231,288 -c—-w C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe
+ 2007-11-30 12:39:22 382,840 -c—-w C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\updspapi.dll
+ 2007-11-13 11:31:11 60,416 -c—-w C:\WINDOWS\$NtUninstallKB951072-v2$\tzchange.exe
+ 2008-04-14 11:01:02 272,128 -c—-w C:\WINDOWS\$NtUninstallKB951376-v2$\bthport.sys
+ 2007-11-30 11:18:51 231,288 -c—-w C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe
+ 2007-11-30 11:18:51 382,840 -c—-w C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\updspapi.dll
+ 2007-11-30 11:18:51 231,288 -c—-w C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe
+ 2007-11-30 11:18:51 382,840 -c—-w C:\WINDOWS\$NtUninstallKB951376$\spuninst\updspapi.dll
+ 2007-10-29 22:35:13 1,287,680 -c—-w C:\WINDOWS\$NtUninstallKB951698$\quartz.dll
+ 2007-11-30 11:18:51 231,288 -c—-w C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe
+ 2007-11-30 12:39:22 382,840 -c—-w C:\WINDOWS\$NtUninstallKB951698$\spuninst\updspapi.dll
+ 2004-08-09 21:00:00 138,496 -c—-w C:\WINDOWS\$NtUninstallKB951748$\afd.sys
+ 2008-02-20 05:32:43 148,992 -c—-w C:\WINDOWS\$NtUninstallKB951748$\dnsapi.dll
+ 2004-08-09 21:00:00 245,248 -c—-w C:\WINDOWS\$NtUninstallKB951748$\mswsock.dll
+ 2007-11-30 12:39:22 231,288 -c—-w C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe
+ 2007-11-30 12:39:19 382,840 -c—-w C:\WINDOWS\$NtUninstallKB951748$\spuninst\updspapi.dll
+ 2007-10-30 17:20:55 360,064 -c—-w C:\WINDOWS\$NtUninstallKB951748$\tcpip.sys
+ 2006-08-16 09:37:30 225,664 -c—-w C:\WINDOWS\$NtUninstallKB951748$\tcpip6.sys
+ 2004-08-09 21:00:00 331,776 -c—-w C:\WINDOWS\$NtUninstallKB952287$\msadce.dll
+ 2007-11-30 11:18:51 231,288 -c—-w C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe
+ 2007-11-30 11:18:51 382,840 -c—-w C:\WINDOWS\$NtUninstallKB952287$\spuninst\updspapi.dll
+ 2005-06-29 01:46:00 74,240 -c—-w C:\WINDOWS\$NtUninstallKB952954$\mscms.dll
+ 2007-11-30 12:39:22 231,288 -c—-w C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe
+ 2007-11-30 12:39:22 382,840 -c—-w C:\WINDOWS\$NtUninstallKB952954$\spuninst\updspapi.dll
+ 2007-11-30 12:39:22 231,288 -c—-w C:\WINDOWS\$NtUninstallKB953356$\spuninst\spuninst.exe
+ 2007-11-30 12:39:22 382,840 -c—-w C:\WINDOWS\$NtUninstallKB953356$\spuninst\updspapi.dll
+ 2008-04-21 06:56:54 1,024,000 -c—-w C:\WINDOWS\$NtUninstallKB953838$\browseui.dll
+ 2008-04-21 06:56:54 151,040 -c—-w C:\WINDOWS\$NtUninstallKB953838$\cdfview.dll
+ 2008-04-21 06:56:55 1,054,208 -c—-w C:\WINDOWS\$NtUninstallKB953838$\danim.dll
+ 2008-04-21 06:56:55 357,888 -c—-w C:\WINDOWS\$NtUninstallKB953838$\dxtmsft.dll
+ 2008-04-21 06:56:55 205,312 -c—-w C:\WINDOWS\$NtUninstallKB953838$\dxtrans.dll
+ 2008-04-21 06:56:55 55,808 -c—-w C:\WINDOWS\$NtUninstallKB953838$\extmgr.dll
+ 2008-04-17 10:46:59 18,432 -c—-w C:\WINDOWS\$NtUninstallKB953838$\iedw.exe
+ 2008-04-21 06:56:56 251,904 -c—-w C:\WINDOWS\$NtUninstallKB953838$\iepeers.dll
+ 2008-04-21 06:56:56 96,256 -c—-w C:\WINDOWS\$NtUninstallKB953838$\inseng.dll
+ 2008-04-21 06:56:56 16,384 -c—-w C:\WINDOWS\$NtUninstallKB953838$\jsproxy.dll
+ 2008-04-21 06:56:57 3,066,880 -c—-w C:\WINDOWS\$NtUninstallKB953838$\mshtml.dll
+ 2008-04-21 06:56:57 449,024 -c—-w C:\WINDOWS\$NtUninstallKB953838$\mshtmled.dll
+ 2008-04-21 06:56:57 146,432 -c—-w C:\WINDOWS\$NtUninstallKB953838$\msrating.dll
+ 2008-04-21 06:56:58 532,480 -c—-w C:\WINDOWS\$NtUninstallKB953838$\mstime.dll
+ 2008-04-21 06:56:58 39,424 -c—-w C:\WINDOWS\$NtUninstallKB953838$\pngfilt.dll
+ 2008-04-21 06:56:58 1,499,136 -c—-w C:\WINDOWS\$NtUninstallKB953838$\shdocvw.dll
+ 2008-04-21 06:56:58 474,112 -c—-w C:\WINDOWS\$NtUninstallKB953838$\shlwapi.dll
+ 2007-11-30 12:39:22 231,288 -c—-w C:\WINDOWS\$NtUninstallKB953838$\spuninst\spuninst.exe
+ 2007-11-30 12:39:19 382,840 -c—-w C:\WINDOWS\$NtUninstallKB953838$\spuninst\updspapi.dll
+ 2008-04-21 06:56:58 618,496 -c—-w C:\WINDOWS\$NtUninstallKB953838$\urlmon.dll
+ 2008-04-21 06:56:59 666,624 -c—-w C:\WINDOWS\$NtUninstallKB953838$\wininet.dll
+ 2008-04-17 10:37:04 351,744 -c—-w C:\WINDOWS\$NtUninstallKB953838$\xpsp3res.dll
+ 2007-11-30 12:39:22 231,288 -c—-w C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe
+ 2007-11-30 11:18:51 382,840 -c—-w C:\WINDOWS\$NtUninstallKB953839$\spuninst\updspapi.dll
+ 2005-06-10 15:28:00 209,632 -c—-w C:\WINDOWS\$NtUninstallWMCSetup$\spuninst\spuninst.exe
+ 2005-06-10 15:28:06 371,936 -c—-w C:\WINDOWS\$NtUninstallWMCSetup$\spuninst\updspapi.dll
+ 2008-04-24 17:55:37 65,536 —-a-w C:\WINDOWS\assembly\GAC\dao\10.0.4504.0__31bf3856ad364e35\DAO.DLL
+ 2008-04-24 17:55:44 245,760 —-a-w C:\WINDOWS\assembly\GAC\EnvDTE\8.0.0.0__b03f5f7f11d50a3a\envdte.dll
+ 2008-04-24 17:55:44 135,168 —-a-w C:\WINDOWS\assembly\GAC\EnvDTE80\8.0.0.0__b03f5f7f11d50a3a\envdte80.dll
+ 2008-04-24 17:55:44 4,608 —-a-w C:\WINDOWS\assembly\GAC\Extensibility\7.0.3300.0__b03f5f7f11d50a3a\extensibility.dll
+ 2008-04-24 17:55:37 1,215,328 —-a-w C:\WINDOWS\assembly\GAC\IACore\1.7.6223.0__31bf3856ad364e35\IACore.dll
+ 2008-04-24 17:55:37 82,784 —-a-w C:\WINDOWS\assembly\GAC\IALoader\1.7.6223.0__31bf3856ad364e35\IALoader.dll
+ 2008-04-24 17:55:29 31,560 —-a-w C:\WINDOWS\assembly\GAC\ipdmctrl\11.0.0.0__71e9bce111e9429c\IPDMCTRL.DLL
- 2007-10-14 03:52:19 53,248 —-a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.AudioVideoPlayback.dll
+ 2008-09-19 07:22:38 53,248 —-a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.AudioVideoPlayback.dll
- 2007-10-14 03:52:20 12,800 —-a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Diagnostics.dll
+ 2008-09-19 07:22:38 12,800 —-a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Diagnostics.dll
- 2007-10-14 03:52:20 473,600 —-a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3D.dll
+ 2008-09-19 07:22:38 473,600 —-a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3D.dll
+ 2008-09-19 07:22:39 577,024 —-a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2907.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2007-10-14 03:52:20 145,920 —-a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectDraw.dll
+ 2008-09-19 07:22:39 145,920 —-a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectDraw.dll
- 2007-10-14 03:52:20 159,232 —-a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectInput.dll
+ 2008-09-19 07:22:39 159,232 —-a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectInput.dll
- 2007-10-14 03:52:20 364,544 —-a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectPlay.dll
+ 2008-09-19 07:22:40 364,544 —-a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectPlay.dll
- 2007-10-14 03:52:21 178,176 —-a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectSound.dll
+ 2008-09-19 07:22:40 178,176 —-a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectSound.dll
- 2007-10-14 03:52:18 223,232 —-a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.dll
+ 2008-09-19 07:22:37 223,232 —-a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.dll
+ 2008-04-24 17:55:29 16,712 —-a-w C:\WINDOWS\assembly\GAC\Microsoft.Office.InfoPath.Permission\12.0.0.0__71e9bce111e9429c\Microsoft.Office.InfoPath.Permission.dll
+ 2008-04-24 17:52:55 80,696 —-a-w C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.Access.Dao\12.0.0.0__71e9bce111e9429c\Microsoft.Office.interop.access.dao.dll
+ 2008-04-24 17:54:07 1,612,592 —-a-w C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.Access\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Access.dll
+ 2008-04-24 17:54:07 1,276,720 —-a-w C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.Excel\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Excel.dll
+ 2008-04-24 17:54:08 150,320 —-a-w C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.Graph\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Graph.dll
+ 2008-04-24 17:55:31 404,296 —-a-w C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.InfoPath.SemiTrust\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.InfoPath.SemiTrust.dll
+ 2008-04-24 17:54:10 88,896 —-a-w C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.InfoPath.Xml\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.InfoPath.Xml.dll
+ 2008-04-24 17:54:10 146,232 —-a-w C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.InfoPath\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.InfoPath.dll
+ 2008-04-24 17:55:16 17,208 —-a-w C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.OneNote\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.OneNote.dll
+ 2008-04-24 17:54:08 920,376 —-a-w C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.Outlook\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Outlook.dll
+ 2008-04-24 17:54:09 35,648 —-a-w C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.OutlookViewCtl\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.OutlookViewCtl.dll
+ 2008-04-24 17:54:09 248,632 —-a-w C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.PowerPoint\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.PowerPoint.dll
+ 2008-04-24 17:54:09 232,248 —-a-w C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.Publisher\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Publisher.dll
+ 2008-04-24 17:54:08 20,280 —-a-w C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.SmartTag\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.SmartTag.dll
+ 2008-04-24 17:54:10 781,104 —-a-w C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.Word\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Word.dll
+ 2008-04-24 17:55:38 13,312 —-a-w C:\WINDOWS\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.stdformat.dll
- 2006-05-05 03:19:05 371,296 —-a-w C:\WINDOWS\assembly\GAC\Microsoft.Vbe.Interop.Forms\11.0.0.0__71e9bce111e9429c\Microsoft.Vbe.Interop.Forms.dll
+ 2008-04-24 17:54:07 371,496 —-a-w C:\WINDOWS\assembly\GAC\Microsoft.Vbe.Interop.Forms\11.0.0.0__71e9bce111e9429c\Microsoft.Vbe.Interop.Forms.dll
+ 2008-04-24 17:54:10 64,288 —-a-w C:\WINDOWS\assembly\GAC\Microsoft.Vbe.Interop\12.0.0.0__71e9bce111e9429c\Microsoft.Vbe.Interop.dll
+ 2008-04-24 17:55:45 69,632 —-a-w C:\WINDOWS\assembly\GAC\Microsoft.VisualStudio.CommandBars\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.CommandBars.dll
+ 2008-04-24 17:55:50 176,128 —-a-w C:\WINDOWS\assembly\GAC\Microsoft.VisualStudio.Debugger.Interop\8.0.1.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Debugger.Interop.dll
+ 2008-04-24 17:55:42 8,704 —-a-w C:\WINDOWS\assembly\GAC\Microsoft.VisualStudio.Designer.Interfaces\1.0.5000.0__b03f5f7f11d50a3a\microsoft.visualstudio.designer.interfaces.dll
+ 2008-04-24 17:55:50 118,784 —-a-w C:\WINDOWS\assembly\GAC\Microsoft.VisualStudio.OLE.Interop\7.1.40304.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.OLE.Interop.dll
+ 2008-04-24 17:55:50 167,936 —-a-w C:\WINDOWS\assembly\GAC\Microsoft.VisualStudio.Shell.Interop.8.0\8.0.0.0__b03f5f7f11d50a3a\microsoft.visualstudio.shell.interop.8.0.dll
+ 2008-04-24 17:55:50 249,856 —-a-w C:\WINDOWS\assembly\GAC\Microsoft.VisualStudio.Shell.Interop\7.1.40304.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Shell.Interop.dll
+ 2008-04-24 17:55:50 57,344 —-a-w C:\WINDOWS\assembly\GAC\Microsoft.VisualStudio.TextManager.Interop.8.0\8.0.0.0__b03f5f7f11d50a3a\microsoft.visualstudio.textmanager.interop.8.0.dll
+ 2008-04-24 17:55:50 114,688 —-a-w C:\WINDOWS\assembly\GAC\Microsoft.VisualStudio.TextManager.Interop\7.1.40304.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.TextManager.Interop.dll
+ 2008-04-24 17:55:49 11,264 —-a-w C:\WINDOWS\assembly\GAC\Microsoft.VisualStudio.VSHelp\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.VSHelp.dll
+ 2008-04-24 17:55:49 8,704 —-a-w C:\WINDOWS\assembly\GAC\Microsoft.VisualStudio.VSHelp80\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.VSHelp80.dll
+ 2008-04-24 17:54:08 416,544 —-a-w C:\WINDOWS\assembly\GAC\office\12.0.0.0__71e9bce111e9429c\OFFICE.DLL
+ 2008-04-24 17:52:53 12,104 —-a-w C:\WINDOWS\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Access\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Access.dll
+ 2008-04-24 17:52:56 12,096 —-a-w C:\WINDOWS\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Excel\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Excel.dll
+ 2008-04-24 17:54:44 12,096 —-a-w C:\WINDOWS\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Graph\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Graph.dll
+ 2008-04-24 17:55:32 12,616 —-a-w C:\WINDOWS\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.InfoPath.Xml\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.InfoPath.Xml.dll
+ 2008-04-24 17:55:32 12,616 —-a-w C:\WINDOWS\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.InfoPath\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.InfoPath.dll
+ 2008-04-24 17:55:17 12,104 —-a-w C:\WINDOWS\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Outlook\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Outlook.dll
+ 2008-04-24 17:55:16 12,632 —-a-w C:\WINDOWS\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.OutlookViewCtl\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.OutlookViewCtl.dll
+ 2008-04-24 17:55:17 12,112 —-a-w C:\WINDOWS\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.PowerPoint\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.PowerPoint.dll
+ 2008-04-24 17:55:23 12,104 —-a-w C:\WINDOWS\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Publisher\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Publisher.dll
+ 2008-04-24 17:55:05 12,104 —-a-w C:\WINDOWS\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.SmartTag\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.SmartTag.dll
+ 2008-04-24 17:55:27 12,096 —-a-w C:\WINDOWS\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Word\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Word.dll
+ 2008-04-24 17:55:08 12,080 —-a-w C:\WINDOWS\assembly\GAC\Policy.11.0.Microsoft.Vbe.Interop\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Vbe.Interop.dll
+ 2008-04-24 17:55:07 11,544 —-a-w C:\WINDOWS\assembly\GAC\Policy.11.0.office\12.0.0.0__71e9bce111e9429c\Policy.11.0.Office.dll
+ 2008-04-24 17:55:50 53,248 —-a-w C:\WINDOWS\assembly\GAC\VSLangProj\7.0.3300.0__b03f5f7f11d50a3a\VSLangProj.dll
+ 2008-04-24 17:55:50 19,968 —-a-w C:\WINDOWS\assembly\GAC\VSLangProj2\7.0.5000.0__b03f5f7f11d50a3a\VSLangProj2.dll
+ 2008-04-24 17:55:50 73,728 —-a-w C:\WINDOWS\assembly\GAC\VSLangProj80\8.0.0.0__b03f5f7f11d50a3a\VSLangProj80.dll
+ 2008-04-24 17:55:46 49,152 —-a-w C:\WINDOWS\assembly\GAC\VsWebSite.Interop\8.0.0.0__b03f5f7f11d50a3a\VsWebSite.Interop.dll
- 2007-07-11 16:07:59 68,608 —-a-w C:\WINDOWS\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2008-04-12 05:32:22 69,120 —-a-w C:\WINDOWS\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
- 2007-07-11 16:08:07 72,192 —-a-w C:\WINDOWS\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
+ 2008-04-12 05:32:28 72,192 —-a-w C:\WINDOWS\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
+ 2008-04-24 17:55:31 118,112 —-a-w C:\WINDOWS\assembly\GAC_32\Microsoft.Office.InfoPath.Client.Internal.Host.Interop\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Infopath.Client.Internal.Host.Interop.dll
+ 2008-04-24 17:55:54 367,400 —-a-w C:\WINDOWS\assembly\GAC_32\Microsoft.VisualStudio.Tools.Applications.InteropAdapter\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.InteropAdapter.dll
+ 2008-04-24 17:55:44 1,662,976 —-a-w C:\WINDOWS\assembly\GAC_32\mscorcfg\2.0.0.0__b03f5f7f11d50a3a\mscorcfg.dll
- 2007-07-11 16:08:08 4,308,992 —-a-w C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
+ 2008-04-12 05:32:05 4,444,160 —-a-w C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
- 2007-07-11 16:08:09 482,304 —-a-w C:\WINDOWS\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
+ 2008-04-12 05:32:30 483,840 —-a-w C:\WINDOWS\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
- 2007-07-11 16:08:05 2,902,016 —-a-w C:\WINDOWS\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
+ 2008-04-12 05:32:14 3,036,160 —-a-w C:\WINDOWS\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
- 2007-07-11 16:07:53 258,048 —-a-w C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2008-04-12 05:32:32 258,048 —-a-w C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
- 2007-07-11 16:07:53 114,176 —-a-w C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
+ 2008-04-12 05:32:32 113,664 —-a-w C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
- 2007-07-11 16:08:13 260,096 —-a-w C:\WINDOWS\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
+ 2008-04-12 05:32:28 261,120 —-a-w C:\WINDOWS\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
- 2007-07-11 16:08:02 5,156,864 —-a-w C:\WINDOWS\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
+ 2008-04-12 05:32:12 5,431,296 —-a-w C:\WINDOWS\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
- 2007-07-11 16:07:58 10,752 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
+ 2008-04-12 05:32:20 10,752 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
- 2007-07-11 16:07:53 507,904 —-a-w C:\WINDOWS\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
+ 2008-04-12 05:32:13 507,904 —-a-w C:\WINDOWS\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
- 2007-07-11 16:07:55 13,312 —-a-w C:\WINDOWS\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
+ 2008-04-12 05:32:21 13,312 —-a-w C:\WINDOWS\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
- 2007-07-11 16:08:06 8,192 —-a-w C:\WINDOWS\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
+ 2008-04-12 05:32:24 8,192 —-a-w C:\WINDOWS\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
- 2007-07-11 16:08:06 36,864 —-a-w C:\WINDOWS\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
+ 2008-04-12 05:32:25 77,824 —-a-w C:\WINDOWS\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
- 2007-07-11 16:08:07 5,632 —-a-w C:\WINDOWS\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
+ 2008-04-12 05:32:26 6,656 —-a-w C:\WINDOWS\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
+ 2008-04-24 17:55:44 106,496 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Conversion\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Conversion.dll
- 2007-07-11 16:07:56 413,696 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
+ 2008-04-12 05:32:34 348,160 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
- 2007-07-11 16:07:56 36,864 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
+ 2008-04-12 05:32:34 36,864 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
- 2007-07-11 16:07:57 647,168 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
+ 2008-04-12 05:32:35 655,360 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
- 2007-07-11 16:07:57 73,728 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
+ 2008-04-12 05:32:36 77,824 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
- 2007-07-11 16:07:55 749,568 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
+ 2008-04-12 05:32:26 749,568 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
+ 2008-04-24 17:55:48 69,632 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.MSXML\8.0.0.0__b03f5f7f11d50a3a\microsoft.msxml.dll
+ 2008-04-24 17:55:31 609,104 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Office.InfoPath.Client.Internal.Host\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Infopath.Client.Internal.Host.dll
+ 2008-04-24 17:55:29 43,840 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Office.InfoPath.FormControl\12.0.0.0__71e9bce111e9429c\microsoft.office.infopath.formcontrol.dll
+ 2008-04-24 17:55:32 39,728 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Office.InfoPath.Vsta\12.0.0.0__71e9bce111e9429c\Microsoft.Office.InfoPath.Vsta.dll
+ 2008-04-24 17:55:31 60,200 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Office.InfoPath\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Infopath.dll
- 2007-07-11 16:08:15 110,592 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2008-04-12 05:32:25 110,592 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
- 2007-07-11 16:08:14 372,736 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
+ 2008-04-12 05:32:24 372,736 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
- 2007-07-11 16:07:51 28,672 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
+ 2008-04-12 05:32:30 28,672 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
- 2007-07-11 16:08:14 667,648 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
+ 2008-04-12 05:32:23 671,744 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
- 2007-07-11 16:08:15 5,632 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
+ 2008-04-12 05:32:09 5,632 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
+ 2008-04-24 17:55:40 733,184 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.CommonIDE\8.0.0.0__b03f5f7f11d50a3a\microsoft.visualstudio.commonide.dll
+ 2008-04-24 17:55:42 106,496 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.Configuration\2.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Configuration.dll
+ 2008-04-24 17:47:17 49,152 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.DebuggerVisualizers\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.DebuggerVisualizers.dll
+ 2008-04-24 17:55:42 434,176 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.Design\2.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Design.dll
+ 2008-04-24 17:55:49 1,859,584 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.Editors\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Editors.dll
+ 2008-04-24 17:55:49 24,576 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.HostingProcess.Utilities.Sync\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.HostingProcess.Utilities.Sync.dll
+ 2008-04-24 17:55:49 49,152 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.HostingProcess.Utilities\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.HostingProcess.Utilities.dll
+ 2008-04-24 17:55:44 32,768 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.ManagedInterfaces\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.ManagedInterfaces.dll
+ 2008-04-24 17:55:43 344,064 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.Package.LanguageService\2.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Package.LanguageService.dll
+ 2008-04-24 17:55:44 4,096 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.ProjectAggregator\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.ProjectAggregator.dll
+ 2008-04-24 17:55:53 806,912 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.Publish\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Publish.dll
+ 2008-04-24 17:55:44 249,856 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.Shell.Design\2.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Shell.Design.dll
+ 2008-04-24 17:55:44 376,832 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.Shell\2.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Shell.dll
+ 2008-04-24 17:55:41 15,872 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.TemplateWizardInterface\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.TemplateWizardInterface.dll
+ 2008-04-24 17:55:36 211,736 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.Adapter\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.Adapter.dll
+ 2008-04-24 17:55:36 105,248 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.AddInManager\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.AddInManager.dll
+ 2008-04-24 17:55:36 330,520 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.Blueprints\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.Blueprints.dll
+ 2008-04-24 17:55:36 39,712 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.ComRPCChannel\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.ComRPCChannel.dll
+ 2008-04-24 17:55:37 39,704 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.Contract\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.Contract.dll
+ 2008-04-24 17:55:36 72,472 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.Tools.Applications.DesignTime\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Tools.Applications.DesignTime.dll
+ 2008-04-24 17:55:38 16,384 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.VSContentInstaller\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.VSContentInstaller.dll
+ 2008-04-24 17:55:43 360,448 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.Windows.Forms\2.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Windows.Forms.dll
+ 2008-04-24 17:55:42 73,728 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.WizardFramework\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.WizardFramework.Dll
+ 2008-04-24 17:47:10 53,248 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio.Zip\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.Zip.dll
+ 2008-04-24 17:55:43 294,912 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualStudio\2.0.0.0__b03f5f7f11d50a3a\microsoft.visualstudio.dll
- 2007-07-11 16:07:52 12,800 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2008-04-12 05:32:31 12,800 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
- 2007-07-11 16:07:52 32,768 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
+ 2008-04-12 05:32:23 32,768 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
+ 2008-04-24 17:55:48 4,202,496 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VSDesigner\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VSDesigner.dll
- 2007-07-11 16:07:52 7,168 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
+ 2008-04-12 05:32:22 7,168 —-a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
- 2007-07-11 16:08:11 110,592 —-a-w C:\WINDOWS\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
+ 2008-04-12 05:32:27 110,592 —-a-w C:\WINDOWS\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
+ 2008-04-24 17:55:36 47,832 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.AddIn.Contract\2.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll
+ 2008-04-24 17:55:36 39,624 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.AddIn\2.0.0.0__b03f5f7f11d50a3a\System.AddIn.dll
- 2007-07-11 16:07:59 81,920 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
+ 2008-04-12 05:32:27 81,920 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
- 2007-07-11 16:08:11 413,696 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
+ 2008-04-12 05:32:14 425,984 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
- 2007-07-11 16:08:09 716,800 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
+ 2008-04-12 05:32:15 741,376 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
- 2007-07-11 16:07:54 888,832 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
+ 2008-04-12 05:32:15 933,888 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
- 2007-07-11 16:08:05 5,001,216 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
+ 2008-04-12 05:32:36 5,070,848 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
- 2007-07-11 16:08:01 188,416 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
+ 2008-04-12 05:32:35 188,416 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
- 2007-07-11 16:07:59 397,312 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
+ 2008-04-12 05:32:20 401,408 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
- 2007-07-11 16:08:01 81,920 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
+ 2008-04-12 05:32:31 81,920 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
- 2007-07-11 16:08:12 577,536 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
+ 2008-04-12 05:32:09 630,784 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
- 2007-07-11 16:08:10 372,736 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
+ 2008-04-12 05:32:32 372,736 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
- 2007-07-11 16:08:12 258,048 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2008-04-12 05:32:30 258,048 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
- 2007-07-11 16:08:10 299,008 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
+ 2008-04-12 05:32:29 299,008 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
- 2007-07-11 16:08:11 131,072 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
+ 2008-04-12 05:32:29 131,072 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
- 2007-07-11 16:07:58 258,048 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
+ 2008-04-12 05:32:10 258,048 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
- 2007-07-11 16:08:01 114,688 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
+ 2008-04-12 05:32:10 114,688 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
- 2007-07-11 16:08:13 835,584 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
+ 2008-04-12 05:32:18 884,736 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
- 2007-07-11 16:08:02 86,016 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
+ 2008-04-12 05:32:19 90,112 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
- 2007-07-11 16:08:03 823,296 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
+ 2008-04-12 05:32:17 839,680 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
- 2007-07-11 16:08:04 5,152,768 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
+ 2008-04-12 05:32:21 5,013,504 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
- 2007-07-11 16:08:04 2,027,520 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
+ 2008-04-12 05:32:11 2,068,480 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
- 2007-07-11 16:08:12 2,940,928 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
+ 2008-04-12 05:32:17 3,076,096 —-a-w C:\WINDOWS\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
+ 2008-04-24 17:55:36 13,024 —-a-w C:\WINDOWS\assembly\GAC_MSIL\VSTADTEProvider.Interop\8.0.0.0__b03f5f7f11d50a3a\VSTADTEProvider.Interop.dll
+ 2008-04-12 05:50:59 27,136 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Accessibility\c6772fd12a581ad3be49e3f2a80b5622\Accessibility.ni.dll
+ 2008-04-12 05:51:00 884,736 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\a1d353edc300e3aff0784202f68a657b\AspNetMMCExt.ni.dll
+ 2008-04-12 05:51:00 237,568 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\c10ec9b4de2b366236ec83237dc31281\CustomMarshalers.ni.dll
+ 2008-04-12 05:51:00 15,360 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\dfsvc\837fe02bdcf637d5bf1e5ffb935ebb80\dfsvc.ni.exe
+ 2008-04-12 05:51:01 876,544 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\9710a3c0d11dd264c3a6b88977699e9b\Microsoft.Build.Engine.ni.dll
+ 2008-04-12 05:51:02 81,920 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\e2858a45971fb30b0c0523dbb52c1d4e\Microsoft.Build.Framework.ni.dll
+ 2008-04-12 05:51:04 1,695,744 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\63d69ffdf3c640d2d104a4b74e8115f8\Microsoft.Build.Tasks.ni.dll
+ 2008-04-12 05:51:04 167,936 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\11cb5418c06e30100616fbf205588489\Microsoft.Build.Utilities.ni.dll
+ 2008-04-12 05:51:06 1,740,800 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\923bd55258380eae77353d36a5a1b08f\Microsoft.VisualBasic.ni.dll
+ 2008-04-12 05:33:43 11,722,752 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll
+ 2008-04-12 05:51:07 1,011,712 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuration\eee9b48577689e92db5a7b5c5de98d9b\System.Configuration.ni.dll
+ 2008-04-12 05:34:06 7,049,216 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Data\5f669e819da7010c1dca347a25597c42\System.Data.ni.dll
+ 2008-04-12 05:51:08 1,798,144 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Deployment\c7dea4895e1fa33d65e448c03de48d26\System.Deployment.ni.dll
+ 2008-04-12 05:34:23 10,969,088 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Design\c1e16b40e30a05c39be8aee46311841c\System.Design.ni.dll
+ 2008-04-12 05:51:10 1,224,704 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\914668b240550f529e54bb772c6fc881\System.DirectoryServices.ni.dll
+ 2008-04-12 05:51:11 512,000 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\f11bc82c09955cb8438d3885a99c297d\System.DirectoryServices.Protocols.ni.dll
+ 2008-04-12 05:34:26 229,376 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\b974f6c17d17a533adf6e7710c5a62fa\System.Drawing.Design.ni.dll
+ 2008-04-12 05:34:25 1,667,072 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e83aac37b2623f1a24c70979f31dd56\System.Drawing.ni.dll
+ 2008-04-12 05:51:12 659,456 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\646131eda5f21f4e6216733d49c22c56\System.EnterpriseServices.ni.dll
+ 2008-04-12 05:51:12 294,912 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\646131eda5f21f4e6216733d49c22c56\System.EnterpriseServices.Wrapper.dll
+ 2008-04-12 05:51:13 733,184 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Security\2b5994269cc5b996231c9b21afea9a91\System.Security.ni.dll
+ 2008-04-12 05:51:13 233,472 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\193ac978af569ad9ee45110b359961b9\System.ServiceProcess.ni.dll
+ 2008-04-12 05:51:14 679,936 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Transactions\12e0aa1030badf4524f897e3f57b037a\System.Transactions.ni.dll
+ 2008-04-12 05:51:28 2,342,912 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\37d87b3cab1c66ec4430ebb2abeaa570\System.Web.Mobile.ni.dll
+ 2008-04-12 05:51:28 237,568 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\b5b81faf46fc63c20d5339b36edd02fa\System.Web.RegularExpressions.ni.dll
+ 2008-04-12 05:51:30 1,986,560 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web.Services\38991368499e2109ea4099a0fe29c5a3\System.Web.Services.ni.dll
+ 2008-04-12 05:51:25 12,509,184 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web\67cfb70213562afe2ca9b9066764af3a\System.Web.ni.dll
+ 2008-04-12 05:34:39 13,193,216 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll
+ 2008-04-12 05:34:46 5,771,264 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\c98cb65a79cfccb44ea727ebe4593ede\System.Xml.ni.dll
+ 2008-04-12 05:33:57 8,265,728 —-a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll
+ 2008-06-13 13:10:50 272,128 ——w C:\WINDOWS\Driver Cache\i386\bthport.sys
- 2007-02-28 09:08:48 2,136,064 ——w C:\WINDOWS\Driver Cache\i386\ntkrnlmp.exe
+ 2008-08-14 09:58:27 2,136,064 ——w C:\WINDOWS\Driver Cache\i386\ntkrnlmp.exe
- 2007-02-28 08:38:55 2,057,600 ——w C:\WINDOWS\Driver Cache\i386\ntkrnlpa.exe
+ 2008-08-14 09:22:13 2,057,728 ——w C:\WINDOWS\Driver Cache\i386\ntkrnlpa.exe
- 2007-02-28 08:38:57 2,015,744 ——w C:\WINDOWS\Driver Cache\i386\ntkrpamp.exe
+ 2008-08-14 09:22:14 2,015,744 ——w C:\WINDOWS\Driver Cache\i386\ntkrpamp.exe
- 2007-02-28 09:10:57 2,180,352 ——w C:\WINDOWS\Driver Cache\i386\ntoskrnl.exe
+ 2008-08-14 10:00:45 2,180,352 ——w C:\WINDOWS\Driver Cache\i386\ntoskrnl.exe
+ 2005-10-21 00:02:28 163,328 —-a-w C:\WINDOWS\erdnt\Hiv-backup\ERDNT.EXE
- 2000-08-31 13:00:00 163,328 —-a-w C:\WINDOWS\erdnt\subs\ERDNT.EXE
+ 2005-10-21 00:02:28 163,328 —-a-w C:\WINDOWS\erdnt\subs\ERDNT.EXE
+ 2000-08-31 12:00:00 89,504 —-a-w C:\WINDOWS\fdsv.exe
+ 2000-08-31 12:00:00 80,412 —-a-w C:\WINDOWS\grep.exe
+ 2004-08-09 21:00:00 2,589 ——w C:\WINDOWS\I386\RUNW32.BAT
+ 2008-06-18 22:41:51 86,016 —-a-r C:\WINDOWS\Installer\{47BF1BD6-DCAC-468F-A0AD-E5DECC2211C3}\PrntWzrdIco.exe
+ 2008-08-31 01:13:45 94,208 —-a-r C:\WINDOWS\Installer\{6B976ADF-8AE8-434E-B282-A06C7F624D2F}\python_icon.exe
+ 2008-04-24 17:59:52 1,165,584 —-a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\accicons.exe
+ 2008-04-24 17:59:53 20,240 —-a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\cagicon.exe
+ 2008-04-24 17:59:52 159,504 —-a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\inficon.exe
+ 2008-04-24 17:59:52 184,080 —-a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\joticon.exe
+ 2008-04-24 17:59:53 217,864 —-a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\misc.exe
+ 2008-04-24 17:59:53 18,704 —-a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\mspicons.exe
+ 2008-04-24 17:59:53 35,088 —-a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\oisicon.exe
+ 2008-04-24 17:59:52 845,584 —-a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\outicon.exe
+ 2008-04-24 17:59:53 922,384 —-a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pptico.exe
+ 2008-04-24 17:59:53 272,648 —-a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pubs.exe
+ 2008-04-24 17:59:53 888,080 —-a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\wordicon.exe
+ 2008-04-24 17:59:52 1,172,240 —-a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\xlicons.exe
+ 2008-04-24 17:45:51 217,864 —-a-r C:\WINDOWS\Installer\{90120000-006E-0409-0000-0000000FF1CE}\misc.exe
+ 2008-06-18 22:42:39 102,400 —-a-r C:\WINDOWS\Installer\{9F70BF98-003C-491D-81FC-FF9792206AF0}\iTunesIco.exe
+ 2008-06-18 22:39:49 27,136 —-a-r C:\WINDOWS\Installer\{B74F042E-E1B9-4A5B-8D46-387BB172F0A4}\AppleSoftwareUpdateIco.exe
+ 2008-05-10 14:11:32 22,486 —-a-r C:\WINDOWS\Installer\{E74F828A-2E73-46DA-91B2-0F85F75DF1F5}\_2053624DEEAD8A089DF415.exe
+ 2008-05-10 14:11:32 22,486 —-a-r C:\WINDOWS\Installer\{E74F828A-2E73-46DA-91B2-0F85F75DF1F5}\_6FEFF9B68218417F98F549.exe
+ 2008-05-10 14:11:32 22,486 —-a-r C:\WINDOWS\Installer\{E74F828A-2E73-46DA-91B2-0F85F75DF1F5}\_C843CE6C15D334CF66DF2B.exe
+ 2005-07-22 21:21:34 577,024 —-a-w C:\WINDOWS\Microsoft.NET\DirectX for Managed Code\1.0.2907.0\Microsoft.DirectX.Direct3DX.dll
- 2005-09-23 11:28:52 72,704 —-a-w C:\WINDOWS\Microsoft.NET\Framework\NETFXSBS10.exe
+ 2007-10-24 05:47:38 82,944 —-a-w C:\WINDOWS\Microsoft.NET\Framework\NETFXSBS10.exe
- 2005-09-23 11:28:52 7,680 —-a-w C:\WINDOWS\Microsoft.NET\Framework\sbscmp10.dll
+ 2007-10-24 05:47:38 16,896 —-a-w C:\WINDOWS\Microsoft.NET\Framework\sbscmp10.dll
- 2005-09-23 11:28:56 7,680 —-a-w C:\WINDOWS\Microsoft.NET\Framework\sbscmp20_mscorwks.dll
+ 2007-10-24 05:47:40 16,896 —-a-w C:\WINDOWS\Microsoft.NET\Framework\sbscmp20_mscorwks.dll
- 2005-09-23 11:28:58 7,680 —-a-w C:\WINDOWS\Microsoft.NET\Framework\sbscmp20_perfcounter.dll
+ 2007-10-24 05:47:42 16,896 —-a-w C:\WINDOWS\Microsoft.NET\Framework\sbscmp20_perfcounter.dll
- 2005-09-23 11:28:56 7,680 —-a-w C:\WINDOWS\Microsoft.NET\Framework\SharedReg12.dll
+ 2007-10-24 05:47:40 16,896 —-a-w C:\WINDOWS\Microsoft.NET\Framework\SharedReg12.dll
- 2005-09-23 11:28:52 86,528 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v1.0.3705\mscormmc.dll
+ 2007-10-24 05:47:38 97,280 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v1.0.3705\mscormmc.dll
- 2005-09-23 11:28:36 18,944 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\alinkui.dll
+ 2007-10-24 05:47:26 28,672 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\alinkui.dll
- 2005-09-23 11:28:42 136,192 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\cscompui.dll
+ 2007-10-24 05:47:30 145,408 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\cscompui.dll
- 2005-09-23 11:28:44 4,608 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\CvtResUI.dll
+ 2007-10-24 05:47:32 13,824 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\CvtResUI.dll
- 2005-09-23 11:29:04 183,808 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\vbc7ui.dll
+ 2007-10-24 05:47:48 193,016 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\vbc7ui.dll
- 2005-09-23 11:28:28 208,896 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\Vsavb7rtUI.dll
+ 2007-10-24 05:47:20 218,112 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\Vsavb7rtUI.dll
- 2005-09-23 11:28:56 10,752 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Accessibility.dll
+ 2007-10-24 05:47:40 10,752 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Accessibility.dll
- 2005-09-23 11:28:58 138,240 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\AdoNetDiag.dll
+ 2007-10-24 05:47:42 147,968 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\AdoNetDiag.dll
+ 2006-10-26 17:44:56 68,280 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\al.exe
- 2005-09-23 11:28:36 87,552 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\alink.dll
+ 2007-10-24 05:47:26 99,320 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\alink.dll
- 2007-04-13 07:21:18 58,712 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe
+ 2007-10-24 05:47:42 59,392 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe
- 2005-09-23 11:28:32 36,864 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe
+ 2007-10-24 05:47:22 36,864 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe
- 2007-04-13 07:20:52 10,752 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_filter.dll
+ 2007-10-24 05:47:22 22,024 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_filter.dll
- 2007-04-13 07:20:52 8,192 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll
+ 2007-10-24 05:47:22 17,928 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll
- 2007-04-13 07:20:52 23,552 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Aspnet_perf.dll
+ 2007-10-24 05:47:22 33,288 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Aspnet_perf.dll
- 2007-04-13 07:20:50 75,264 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_rc.dll
+ 2007-10-24 05:47:22 84,480 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_rc.dll
- 2005-09-23 11:28:32 13,824 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe
+ 2007-10-24 05:47:22 24,576 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe
- 2007-04-13 07:20:52 32,608 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe
+ 2007-10-24 05:47:22 32,776 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe
- 2005-09-23 11:28:32 106,496 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe
+ 2007-10-24 05:47:22 106,496 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe
- 2007-04-13 07:20:52 33,632 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
+ 2007-10-24 05:47:22 33,800 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
- 2007-04-13 07:20:52 32,600 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
+ 2007-10-24 05:47:22 33,280 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
- 2007-04-13 07:20:52 507,904 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\AspNetMMCExt.dll
+ 2007-10-24 05:47:22 507,904 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\AspNetMMCExt.dll
- 2005-09-23 11:28:56 106,496 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CasPol.exe
+ 2007-10-24 05:47:40 106,496 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CasPol.exe
- 2007-04-13 07:21:16 88,576 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CORPerfMonExt.dll
+ 2007-10-24 05:47:40 101,896 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CORPerfMonExt.dll
- 2005-09-23 11:28:42 76,984 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\csc.exe
+ 2007-10-24 05:47:30 80,376 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\csc.exe
- 2005-09-23 11:28:42 1,144,832 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\cscomp.dll
+ 2007-10-24 05:47:30 1,162,744 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\cscomp.dll
- 2005-09-23 11:28:42 13,312 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\cscompmgd.dll
+ 2007-10-24 05:47:30 13,312 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\cscompmgd.dll
- 2005-09-23 11:28:58 17,920 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Culture.dll
+ 2007-10-24 05:47:42 27,136 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Culture.dll
- 2005-09-23 11:28:56 68,608 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CustomMarshalers.dll
+ 2007-10-24 05:47:40 69,120 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CustomMarshalers.dll
- 2005-09-23 11:28:44 31,936 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\cvtres.exe
+ 2007-10-24 05:47:30 35,320 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\cvtres.exe
- 2005-09-23 11:28:38 52,736 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\dfdll.dll
+ 2007-10-24 05:47:28 66,552 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\dfdll.dll
- 2007-04-13 07:20:58 5,120 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe
+ 2007-10-24 05:47:28 5,120 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe
- 2005-09-23 11:29:12 547,840 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll
+ 2007-10-24 05:47:54 572,936 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll
- 2005-09-23 11:28:56 788,992 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\EventLogMessages.dll
+ 2007-10-24 05:47:40 798,224 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\EventLogMessages.dll
- 2005-09-23 11:28:50 9,216 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fusion.dll
+ 2007-10-24 05:47:36 18,936 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fusion.dll
- 2007-04-13 07:21:16 9,728 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IEExec.exe
+ 2007-10-24 05:47:40 9,728 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IEExec.exe
- 2005-09-23 11:28:56 8,192 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IEExecRemote.dll
+ 2007-10-24 05:47:40 8,192 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IEExecRemote.dll
- 2005-09-23 11:28:56 36,864 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IEHost.dll
+ 2007-10-24 05:47:40 77,824 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IEHost.dll
- 2005-09-23 11:28:56 5,632 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IIEHost.dll
+ 2007-10-24 05:47:40 6,656 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IIEHost.dll
- 2007-04-13 07:21:16 228,688 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ilasm.exe
+ 2007-10-24 05:47:40 230,904 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ilasm.exe
- 2007-04-13 07:21:16 28,672 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe
+ 2007-10-24 05:47:40 28,672 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe
- 2005-09-23 11:28:56 55,296 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\InstallUtilLib.dll
+ 2007-10-24 05:47:40 65,032 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\InstallUtilLib.dll
- 2005-09-23 11:28:56 72,192 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll
+ 2007-10-24 05:47:40 72,192 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll
- 2005-09-23 11:28:48 40,960 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\jsc.exe
+ 2007-10-24 05:47:34 40,960 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\jsc.exe
+ 2006-10-26 17:45:00 106,496 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Conversion.dll
- 2007-04-13 07:21:10 413,696 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Engine.dll
+ 2007-10-24 05:47:36 348,160 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Engine.dll
- 2005-09-23 11:28:48 36,864 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll
+ 2007-10-24 05:47:36 36,864 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll
- 2007-04-13 07:21:10 647,168 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Tasks.dll
+ 2007-10-24 05:47:36 655,360 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Tasks.dll
- 2005-09-23 11:28:48 73,728 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Utilities.dll
+ 2007-10-24 05:47:36 77,824 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Utilities.dll
- 2007-04-13 07:21:08 749,568 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.JScript.dll
+ 2007-10-24 05:47:34 749,568 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.JScript.dll
- 2005-09-23 11:29:10 110,592 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2007-10-24 05:47:52 110,592 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.Data.dll
- 2005-09-23 11:29:10 372,736 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.dll
+ 2007-10-24 05:47:52 372,736 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.dll
- 2005-09-23 11:29:08 667,648 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.dll
+ 2007-10-24 05:47:50 671,744 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.dll
- 2005-09-23 11:28:30 28,672 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Vsa.dll
+ 2007-10-24 05:47:20 28,672 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Vsa.dll
- 2005-09-23 11:29:10 5,632 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualC.Dll
+ 2007-10-24 05:47:52 5,632 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualC.Dll
- 2005-09-23 11:28:30 32,768 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.dll
+ 2007-10-24 05:47:20 32,768 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.dll
- 2005-09-23 11:28:30 12,800 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2007-10-24 05:47:20 12,800 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
- 2005-09-23 11:28:30 7,168 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft_VsaVb.dll
+ 2007-10-24 05:47:20 7,168 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft_VsaVb.dll
- 2007-04-13 07:20:52 87,040 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\MmcAspExt.dll
+ 2007-10-24 05:47:22 97,792 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\MmcAspExt.dll
- 2005-09-23 11:28:48 69,632 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
+ 2007-10-24 05:47:36 69,632 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
- 2007-04-13 07:21:18 802,304 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
+ 2007-10-24 05:47:40 822,280 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
- 2005-09-23 11:28:56 73,216 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscordbc.dll
+ 2007-10-24 05:47:40 83,456 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscordbc.dll
- 2005-09-23 11:28:56 288,768 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscordbi.dll
+ 2007-10-24 05:47:40 308,224 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscordbi.dll
- 2007-04-13 07:21:16 36,864 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorie.dll
+ 2007-10-24 05:47:40 47,104 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorie.dll
- 2007-04-13 07:21:16 326,656 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
+ 2007-10-24 05:47:40 348,672 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
- 2005-09-23 11:28:56 81,408 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorld.dll
+ 2007-10-24 05:47:40 94,208 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorld.dll
- 2007-04-13 07:21:16 4,308,992 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
+ 2007-10-24 05:47:40 4,444,160 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
- 2007-04-13 07:21:16 102,912 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorpe.dll
+ 2007-10-24 05:47:40 114,688 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorpe.dll
- 2005-09-23 11:29:00 330,752 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll
+ 2007-10-24 05:47:44 340,992 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll
- 2005-09-23 11:28:56 67,072 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll
+ 2007-10-24 05:47:40 77,312 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll
- 2005-09-23 11:28:50 9,216 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsn.dll
+ 2007-10-24 05:47:36 18,944 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsn.dll
- 2007-04-13 07:21:18 227,328 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvc.dll
+ 2007-10-24 05:47:40 242,688 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvc.dll
- 2007-04-13 07:21:18 68,952 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
+ 2007-10-24 05:47:40 70,144 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
- 2005-09-23 11:28:56 10,240 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscortim.dll
+ 2007-10-24 05:47:40 19,456 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscortim.dll
- 2007-04-13 07:21:12 5,634,048 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
+ 2007-10-24 05:47:36 5,814,784 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
- 2005-09-23 11:29:00 22,528 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\MUI\0409\mscorsecr.dll
+ 2007-10-24 05:47:44 31,744 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\MUI\0409\mscorsecr.dll
- 2007-04-13 07:21:16 99,152 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ngen.exe
+ 2007-10-24 05:47:40 101,880 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ngen.exe
- 2007-04-13 07:21:18 15,360 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\normalization.dll
+ 2007-10-24 05:47:40 24,584 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\normalization.dll
- 2005-09-23 11:28:56 78,336 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\PerfCounter.dll
+ 2007-10-24 05:47:40 89,096 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\PerfCounter.dll
- 2007-04-13 07:21:12 136,192 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\peverify.dll
+ 2007-10-24 05:47:36 144,896 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\peverify.dll
- 2005-09-23 11:28:56 53,248 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
+ 2007-10-24 05:47:40 53,248 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
- 2005-09-23 11:28:56 32,768 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
+ 2007-10-24 05:47:40 32,768 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
- 2005-09-23 11:29:02 59,072 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\regtlibv12.exe
+ 2007-10-24 05:47:46 61,952 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\regtlibv12.exe
- 2005-09-23 11:28:58 7,680 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll
+ 2007-10-24 05:47:42 16,896 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll
- 2005-09-23 11:28:56 107,520 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\shfusion.dll
+ 2007-10-24 05:47:40 119,296 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\shfusion.dll
- 2005-09-23 11:29:00 85,504 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ShFusRes.dll
+ 2007-10-24 05:47:44 95,232 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ShFusRes.dll
- 2007-04-13 07:21:18 382,464 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\SOS.dll
+ 2007-10-24 05:47:40 392,696 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\SOS.dll
- 2007-04-13 07:21:18 110,592 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\sysglobl.dll
+ 2007-10-24 05:47:40 110,592 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\sysglobl.dll
- 2007-04-13 07:21:18 413,696 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.configuration.dll
+ 2007-10-24 05:47:42 425,984 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.configuration.dll
- 2005-09-23 11:28:56 81,920 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Configuration.Install.dll
+ 2007-10-24 05:47:40 81,920 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Configuration.Install.dll
- 2007-04-13 07:21:16 2,902,016 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Data.dll
+ 2007-10-24 05:47:40 3,036,160 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Data.dll
- 2007-04-13 07:21:18 482,304 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Data.OracleClient.dll
+ 2007-10-24 05:47:40 483,840 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Data.OracleClient.dll
- 2007-04-13 07:21:18 716,800 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Data.SqlXml.dll
+ 2007-10-24 05:47:40 741,376 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Data.SqlXml.dll
- 2007-04-13 07:20:58 888,832 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Deployment.dll
+ 2007-10-24 05:47:28 933,888 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Deployment.dll
- 2007-04-13 07:21:16 5,001,216 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Design.dll
+ 2007-10-24 05:47:40 5,070,848 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Design.dll
- 2005-09-23 11:28:56 397,312 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.dll
+ 2007-10-24 05:47:40 401,408 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.dll
- 2007-04-13 07:21:18 188,416 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.Protocols.dll
+ 2007-10-24 05:47:40 188,416 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.Protocols.dll
- 2007-04-13 07:21:16 2,940,928 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.dll
+ 2007-10-24 05:47:40 3,076,096 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.dll
- 2005-09-23 11:28:56 81,920 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Drawing.Design.dll
+ 2007-10-24 05:47:40 81,920 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Drawing.Design.dll
- 2007-04-13 07:21:16 577,536 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll
+ 2007-10-24 05:47:40 630,784 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll
- 2007-04-13 07:21:16 258,048 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.dll
+ 2007-10-24 05:47:40 258,048 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.dll
- 2007-04-13 07:21:18 47,616 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Thunk.dll
+ 2007-10-24 05:47:40 57,392 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Thunk.dll
- 2007-04-13 07:21:18 114,176 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Wrapper.dll
+ 2007-10-24 05:47:40 113,664 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Wrapper.dll
- 2007-04-13 07:21:16 372,736 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Management.dll
+ 2007-10-24 05:47:40 372,736 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Management.dll
- 2005-09-23 11:28:56 258,048 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Messaging.dll
+ 2007-10-24 05:47:40 258,048 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Messaging.dll
- 2007-04-13 07:21:16 299,008 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Remoting.dll
+ 2007-10-24 05:47:40 299,008 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Remoting.dll
- 2005-09-23 11:28:56 131,072 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
+ 2007-10-24 05:47:40 131,072 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
- 2005-09-23 11:28:56 258,048 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Security.dll
+ 2007-10-24 05:47:40 258,048 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Security.dll
- 2005-09-23 11:28:56 114,688 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.ServiceProcess.dll
+ 2007-10-24 05:47:40 114,688 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.ServiceProcess.dll
- 2007-04-13 07:21:18 260,096 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Transactions.dll
+ 2007-10-24 05:47:40 261,120 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Transactions.dll
- 2007-04-13 07:21:16 5,156,864 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
+ 2007-10-24 05:47:40 5,431,296 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
- 2005-09-23 11:28:56 835,584 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.Mobile.dll
+ 2007-10-24 05:47:40 884,736 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.Mobile.dll
- 2005-09-23 11:28:56 86,016 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.RegularExpressions.dll
+ 2007-10-24 05:47:40 90,112 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.RegularExpressions.dll
- 2005-09-23 11:28:56 823,296 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.Services.dll
+ 2007-10-24 05:47:40 839,680 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.Services.dll
- 2007-04-13 07:21:16 5,152,768 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll
+ 2007-10-24 05:47:40 5,013,504 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll
- 2007-04-13 07:21:16 2,027,520 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.XML.dll
+ 2007-10-24 05:47:40 2,068,480 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.XML.dll
- 2005-09-23 11:28:56 71,680 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\TLBREF.DLL
+ 2007-10-24 05:47:40 81,400 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\TLBREF.DLL
- 2007-04-13 07:21:28 1,166,672 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\vbc.exe
+ 2007-10-24 05:47:48 1,172,472 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\vbc.exe
- 2007-04-13 07:20:50 1,330,688 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\VsaVb7rt.dll
+ 2007-10-24 05:47:20 1,344,000 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\VsaVb7rt.dll
- 2007-04-13 07:20:52 406,016 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\webengine.dll
+ 2007-10-24 05:47:22 434,688 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\webengine.dll
- 2005-09-23 11:28:56 28,160 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll
+ 2007-10-24 05:47:40 37,896 —-a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll
- 2000-08-31 13:00:00 51,200 —-a-w C:\WINDOWS\NirCmd.exe
+ 2000-08-31 12:00:00 28,672 —-a-w C:\WINDOWS\NirCmd.exe
+ 2000-08-31 12:00:00 98,816 —-a-w C:\WINDOWS\sed.exe
+ 2000-08-31 12:00:00 161,792 —-a-w C:\WINDOWS\SWREG.exe
+ 2000-08-31 12:00:00 136,704 —-a-w C:\WINDOWS\SWSC.exe
+ 2000-08-31 12:00:00 212,480 —-a-w C:\WINDOWS\SWXCACLS.exe
+ 2004-08-09 21:00:00 2,000 ——w C:\WINDOWS\system\KEYBOARD.DRV
+ 2004-08-09 21:00:00 73,376 ——w C:\WINDOWS\system\MCIAVI.DRV
+ 2004-08-09 21:00:00 25,264 ——w C:\WINDOWS\system\MCISEQ.DRV
+ 2004-08-09 21:00:00 28,160 ——w C:\WINDOWS\system\MCIWAVE.DRV
+ 2004-08-09 21:00:00 2,032 ——w C:\WINDOWS\system\MOUSE.DRV
+ 2004-08-09 21:00:00 1,744 ——w C:\WINDOWS\system\SOUND.DRV
+ 2004-08-09 21:00:00 3,360 ——w C:\WINDOWS\system\SYSTEM.DRV
+ 2004-08-09 21:00:00 4,048 ——w C:\WINDOWS\system\TIMER.DRV
+ 2004-08-09 21:00:00 2,176 ——w C:\WINDOWS\system\VGA.DRV
+ 2004-08-09 21:00:00 13,600 ——w C:\WINDOWS\system\WFWNET.DRV
+ 2004-08-09 21:00:00 146,432 ——w C:\WINDOWS\system\WINSPOOL.DRV
+ 2007-02-08 15:49:44 668,672 —-a-w C:\WINDOWS\system32\AdjMmsEng.dll
+ 2003-01-04 22:58:12 643,072 —-a-w C:\WINDOWS\system32\AppUpdate.dll
+ 2005-10-21 13:23:24 151,552 —-a-w C:\WINDOWS\system32\AVICreator.dll
- 2007-10-11 05:57:29 1,024,000 —-a-w C:\WINDOWS\system32\browseui.dll
+ 2008-08-20 05:33:19 1,024,000 —-a-w C:\WINDOWS\system32\browseui.dll
+ 2005-02-22 15:37:48 589,824 —-a-w C:\WINDOWS\system32\CDDBControl.dll
+ 2005-02-22 15:36:50 765,952 —-a-w C:\WINDOWS\system32\CDDBUI.dll
- 2007-10-11 05:57:29 151,040 —-a-w C:\WINDOWS\system32\cdfview.dll
+ 2008-08-20 05:33:17 151,040 —-a-w C:\WINDOWS\system32\cdfview.dll
- 2007-07-30 23:19:20 92,504 —-a-w C:\WINDOWS\system32\cdm.dll
+ 2008-07-19 02:10:48 94,920 —-a-w C:\WINDOWS\system32\cdm.dll
+ 2008-09-24 02:07:40 107,888 —-a-w C:\WINDOWS\system32\CmdLineExt.dll
+ 2005-10-15 03:10:24 65,536 —-a-w C:\WINDOWS\system32\comLyricGetter.dll
+ 2004-08-09 21:00:00 10,544 —-a-w C:\WINDOWS\system32\comm.drv
- 2006-08-15 20:43:00 16,384 —-a-w C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat
+ 2008-10-23 19:11:21 16,384 —-a-w C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat
- 2006-08-15 20:43:00 32,768 —-a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
+ 2008-10-23 19:11:21 32,768 —-a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
+ 2008-10-23 19:11:21 32,768 —-a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
+ 2005-07-22 23:59:04 2,319,568 —-a-w C:\WINDOWS\system32\d3dx9_27.dll
- 2007-10-11 05:57:30 1,054,208 —-a-w C:\WINDOWS\system32\danim.dll
+ 2008-08-20 05:33:18 1,054,208 —-a-w C:\WINDOWS\system32\danim.dll
+ 2004-08-09 21:00:00 1,788 —-a-w C:\WINDOWS\system32\Dcache.bin
- 2005-09-23 11:28:38 83,456 —-a-w C:\WINDOWS\system32\dfshim.dll
+ 2007-10-24 05:47:28 96,760 —-a-w C:\WINDOWS\system32\dfshim.dll
+ 2006-11-30 15:19:38 159,744 —-a-w C:\WINDOWS\system32\DirectEncode.dll
- 2004-08-09 21:00:00 138,496 —-a-w C:\WINDOWS\system32\dllcache\afd.sys
+ 2008-08-14 09:51:43 138,368 —-a-w C:\WINDOWS\system32\dllcache\afd.sys
- 2007-10-11 05:57:29 1,024,000 —-a-w C:\WINDOWS\system32\dllcache\browseui.dll
+ 2008-08-20 05:33:19 1,024,000 —-a-w C:\WINDOWS\system32\dllcache\browseui.dll
+ 2008-06-13 13:10:50 272,128 ——w C:\WINDOWS\system32\dllcache\bthport.sys
- 2007-10-11 05:57:29 151,040 —-a-w C:\WINDOWS\system32\dllcache\cdfview.dll
+ 2008-08-20 05:33:17 151,040 —-a-w C:\WINDOWS\system32\dllcache\cdfview.dll
- 2007-07-30 23:19:20 92,504 —-a-w C:\WINDOWS\system32\dllcache\cdm.dll
+ 2008-07-19 02:10:48 94,920 —-a-w C:\WINDOWS\system32\dllcache\cdm.dll
- 2007-10-11 05:57:30 1,054,208 —-a-w C:\WINDOWS\system32\dllcache\danim.dll
+ 2008-08-20 05:33:18 1,054,208 —-a-w C:\WINDOWS\system32\dllcache\danim.dll
- 2004-08-09 21:00:00 561,179 —-a-w C:\WINDOWS\system32\dllcache\dao360.dll
+ 2008-03-25 04:50:25 554,008 —-a-w C:\WINDOWS\system32\dllcache\dao360.dll
- 2006-06-26 17:37:10 148,480 —-a-w C:\WINDOWS\system32\dllcache\dnsapi.dll
+ 2008-06-20 17:41:10 148,992 —-a-w C:\WINDOWS\system32\dllcache\dnsapi.dll
- 2004-08-09 21:00:00 45,568 —-a-w C:\WINDOWS\system32\dllcache\dnsrslvr.dll
+ 2008-02-20 05:32:43 45,568 —-a-w C:\WINDOWS\system32\dllcache\dnsrslvr.dll
+ 2004-08-04 06:07:58 2,944 —-a-w C:\WINDOWS\system32\dllcache\drmkaud.sys
- 2007-10-11 05:57:30 357,888 —-a-w C:\WINDOWS\system32\dllcache\dxtmsft.dll
+ 2008-08-20 05:33:18 357,888 —-a-w C:\WINDOWS\system32\dllcache\dxtmsft.dll
- 2007-10-11 05:57:30 205,824 —-a-w C:\WINDOWS\system32\dllcache\dxtrans.dll
+ 2008-08-20 05:33:18 205,312 —-a-w C:\WINDOWS\system32\dllcache\dxtrans.dll
- 2005-07-26 04:39:45 243,200 —-a-w C:\WINDOWS\system32\dllcache\es.dll
+ 2008-07-07 20:32:22 253,952 —-a-w C:\WINDOWS\system32\dllcache\es.dll
- 2007-10-11 05:57:30 55,808 —-a-w C:\WINDOWS\system32\dllcache\extmgr.dll
+ 2008-08-20 05:33:18 55,808 —-a-w C:\WINDOWS\system32\dllcache\extmgr.dll
- 2007-06-19 13:31:19 282,112 —-a-w C:\WINDOWS\system32\dllcache\gdi32.dll
+ 2008-02-20 06:51:05 282,624 —-a-w C:\WINDOWS\system32\dllcache\gdi32.dll
- 2007-10-10 10:48:23 18,432 —-a-w C:\WINDOWS\system32\dllcache\iedw.exe
+ 2008-08-19 09:38:57 18,432 —-a-w C:\WINDOWS\system32\dllcache\iedw.exe
- 2007-10-11 05:57:31 251,904 —-a-w C:\WINDOWS\system32\dllcache\iepeers.dll
+ 2008-08-20 05:33:18 251,904 —-a-w C:\WINDOWS\system32\dllcache\iepeers.dll
- 2007-08-21 06:15:44 683,520 —-a-w C:\WINDOWS\system32\dllcache\inetcomm.dll
+ 2008-04-11 18:50:43 683,520 —-a-w C:\WINDOWS\system32\dllcache\inetcomm.dll
- 2007-10-11 05:57:31 96,256 —-a-w C:\WINDOWS\system32\dllcache\inseng.dll
+ 2008-08-20 05:33:18 96,256 —-a-w C:\WINDOWS\system32\dllcache\inseng.dll
- 2007-11-14 07:26:56 450,560 —-a-w C:\WINDOWS\system32\dllcache\jscript.dll
+ 2007-12-18 14:40:58 450,560 —-a-w C:\WINDOWS\system32\dllcache\jscript.dll
- 2007-10-11 05:57:31 16,384 —-a-w C:\WINDOWS\system32\dllcache\jsproxy.dll
+ 2008-08-20 05:33:19 16,384 —-a-w C:\WINDOWS\system32\dllcache\jsproxy.dll
+ 2004-08-09 21:00:00 2,000 —-a-w C:\WINDOWS\system32\dllcache\keyboard.drv
- 2006-08-17 12:28:27 721,920 —-a-w C:\WINDOWS\system32\dllcache\lsasrv.dll
+ 2007-11-07 09:26:56 721,920 —-a-w C:\WINDOWS\system32\dllcache\lsasrv.dll
+ 2004-08-09 21:00:00 2,560 —-a-w C:\WINDOWS\system32\dllcache\lz32.dll
+ 2004-08-09 21:00:00 73,376 —-a-w C:\WINDOWS\system32\dllcache\mciavi.drv
+ 2004-08-09 21:00:00 25,264 —-a-w C:\WINDOWS\system32\dllcache\mciseq.drv
+ 2004-08-09 21:00:00 28,160 —-a-w C:\WINDOWS\system32\dllcache\mciwave.drv
+ 2004-08-09 21:00:00 2,032 —-a-w C:\WINDOWS\system32\dllcache\mouse.drv
- 2004-08-09 21:00:00 181,248 —-a-w C:\WINDOWS\system32\dllcache\mrxdav.sys
+ 2007-12-18 09:51:35 179,584 —-a-w C:\WINDOWS\system32\dllcache\mrxdav.sys
- 2004-08-09 21:00:00 331,776 —-a-w C:\WINDOWS\system32\dllcache\msadce.dll
+ 2008-05-01 14:30:33 331,776 —-a-w C:\WINDOWS\system32\dllcache\msadce.dll
- 2005-06-29 01:46:00 74,240 —-a-w C:\WINDOWS\system32\dllcache\mscms.dll
+ 2008-06-24 16:23:05 74,240 —-a-w C:\WINDOWS\system32\dllcache\mscms.dll
- 2004-08-09 21:00:00 512,029 —-a-w C:\WINDOWS\system32\dllcache\msexch40.dll
+ 2008-03-25 04:50:28 518,944 —-a-w C:\WINDOWS\system32\dllcache\msexch40.dll
- 2004-08-09 21:00:00 319,517 —-a-w C:\WINDOWS\system32\dllcache\msexcl40.dll
+ 2008-03-25 04:50:30 326,432 —-a-w C:\WINDOWS\system32\dllcache\msexcl40.dll
- 2007-10-30 09:55:21 3,065,856 —-a-w C:\WINDOWS\system32\dllcache\mshtml.dll
+ 2008-08-20 05:33:20 3,067,392 —-a-w C:\WINDOWS\system32\dllcache\mshtml.dll
- 2007-10-11 05:57:36 449,024 —-a-w C:\WINDOWS\system32\dllcache\mshtmled.dll
+ 2008-08-20 05:33:19 449,024 —-a-w C:\WINDOWS\system32\dllcache\mshtmled.dll
- 2004-08-09 21:00:00 1,507,356 —-a-w C:\WINDOWS\system32\dllcache\msjet40.dll
+ 2008-03-25 04:50:34 1,516,568 —-a-w C:\WINDOWS\system32\dllcache\msjet40.dll
- 2004-08-09 21:00:00 358,976 —-a-w C:\WINDOWS\system32\dllcache\msjetol1.dll
+ 2008-03-25 04:50:40 355,112 —-a-w C:\WINDOWS\system32\dllcache\msjetol1.dll
- 2004-08-09 21:00:00 151,583 —-a-w C:\WINDOWS\system32\dllcache\msjint40.dll
+ 2008-03-27 08:12:54 151,583 —-a-w C:\WINDOWS\system32\dllcache\msjint40.dll
- 2004-08-09 21:00:00 53,279 —-a-w C:\WINDOWS\system32\dllcache\msjter40.dll
+ 2008-03-25 04:50:42 60,192 —-a-w C:\WINDOWS\system32\dllcache\msjter40.dll
- 2004-08-09 21:00:00 241,693 —-a-w C:\WINDOWS\system32\dllcache\msjtes40.dll
+ 2008-03-25 04:50:42 248,608 —-a-w C:\WINDOWS\system32\dllcache\msjtes40.dll
- 2004-08-09 21:00:00 213,023 —-a-w C:\WINDOWS\system32\dllcache\msltus40.dll
+ 2008-03-25 04:50:44 219,936 —-a-w C:\WINDOWS\system32\dllcache\msltus40.dll
- 2004-08-09 21:00:00 348,189 —-a-w C:\WINDOWS\system32\dllcache\mspbde40.dll
+ 2008-03-25 04:50:45 355,104 —-a-w C:\WINDOWS\system32\dllcache\mspbde40.dll
- 2007-10-11 05:57:36 146,432 —-a-w C:\WINDOWS\system32\dllcache\msrating.dll
+ 2008-08-20 05:33:18 146,432 —-a-w C:\WINDOWS\system32\dllcache\msrating.dll
- 2004-08-09 21:00:00 421,919 —-a-w C:\WINDOWS\system32\dllcache\msrd2x40.dll
+ 2008-03-25 04:50:47 432,928 —-a-w C:\WINDOWS\system32\dllcache\msrd2x40.dll
- 2004-08-09 21:00:00 315,423 —-a-w C:\WINDOWS\system32\dllcache\msrd3x40.dll
+ 2008-03-25 04:50:49 322,336 —-a-w C:\WINDOWS\system32\dllcache\msrd3x40.dll
- 2004-08-09 21:00:00 552,989 —-a-w C:\WINDOWS\system32\dllcache\msrepl40.dll
+ 2008-03-25 04:50:52 559,904 —-a-w C:\WINDOWS\system32\dllcache\msrepl40.dll
- 2004-08-09 21:00:00 258,077 —-a-w C:\WINDOWS\system32\dllcache\mstext40.dll
+ 2008-03-25 04:50:55 264,992 —-a-w C:\WINDOWS\system32\dllcache\mstext40.dll
- 2007-10-11 05:57:37 532,480 —-a-w C:\WINDOWS\system32\dllcache\mstime.dll
+ 2008-08-20 05:33:18 532,480 —-a-w C:\WINDOWS\system32\dllcache\mstime.dll
- 2004-08-09 21:00:00 831,519 —-a-w C:\WINDOWS\system32\dllcache\mswdat10.dll
+ 2008-03-25 04:50:57 838,432 —-a-w C:\WINDOWS\system32\dllcache\mswdat10.dll
- 2004-08-09 21:00:00 245,248 —-a-w C:\WINDOWS\system32\dllcache\mswsock.dll
+ 2008-06-20 17:41:10 245,248 —-a-w C:\WINDOWS\system32\dllcache\mswsock.dll
- 2004-08-09 21:00:00 614,429 —-a-w C:\WINDOWS\system32\dllcache\mswstr10.dll
+ 2008-03-25 04:50:58 621,344 —-a-w C:\WINDOWS\system32\dllcache\mswstr10.dll
- 2004-08-09 21:00:00 348,189 —-a-w C:\WINDOWS\system32\dllcache\msxbde40.dll
+ 2008-03-25 04:50:58 355,104 —-a-w C:\WINDOWS\system32\dllcache\msxbde40.dll
- 2007-02-28 09:08:48 2,136,064 —-a-w C:\WINDOWS\system32\dllcache\ntkrnlmp.exe
+ 2008-08-14 09:58:27 2,136,064 —-a-w C:\WINDOWS\system32\dllcache\ntkrnlmp.exe
- 2007-02-28 08:38:55 2,057,600 —-a-w C:\WINDOWS\system32\dllcache\ntkrnlpa.exe
+ 2008-08-14 09:22:13 2,057,728 —-a-w C:\WINDOWS\system32\dllcache\ntkrnlpa.exe
- 2007-02-28 08:38:57 2,015,744 —-a-w C:\WINDOWS\system32\dllcache\ntkrpamp.exe
+ 2008-08-14 09:22:14 2,015,744 —-a-w C:\WINDOWS\system32\dllcache\ntkrpamp.exe
- 2007-02-28 09:10:57 2,180,352 —-a-w C:\WINDOWS\system32\dllcache\ntoskrnl.exe
+ 2008-08-14 10:00:45 2,180,352 —-a-w C:\WINDOWS\system32\dllcache\ntoskrnl.exe
+ 2004-08-09 21:00:00 2,944 —-a-w C:\WINDOWS\system32\dllcache\null.sys
- 2007-05-17 11:28:05 549,376 —-a-w C:\WINDOWS\system32\dllcache\oleaut32.dll
+ 2007-12-04 18:38:13 550,912 —-a-w C:\WINDOWS\system32\dllcache\oleaut32.dll
- 2007-10-11 05:57:37 39,424 —-a-w C:\WINDOWS\system32\dllcache\pngfilt.dll
+ 2008-08-20 05:33:18 39,424 —-a-w C:\WINDOWS\system32\dllcache\pngfilt.dll
- 2007-10-29 22:35:13 1,287,680 —-a-w C:\WINDOWS\system32\dllcache\quartz.dll
+ 2008-05-07 04:55:40 1,288,192 —-a-w C:\WINDOWS\system32\dllcache\quartz.dll
- 2006-07-13 08:48:58 202,240 —-a-w C:\WINDOWS\system32\dllcache\rmcast.sys
+ 2008-05-08 12:28:49 202,752 —-a-w C:\WINDOWS\system32\dllcache\rmcast.sys
- 2007-10-11 05:57:39 1,498,112 —-a-w C:\WINDOWS\system32\dllcache\shdocvw.dll
+ 2008-08-20 05:33:19 1,499,136 —-a-w C:\WINDOWS\system32\dllcache\shdocvw.dll
- 2007-10-11 05:57:40 474,112 —-a-w C:\WINDOWS\system32\dllcache\shlwapi.dll
+ 2008-08-20 05:33:19 474,112 —-a-w C:\WINDOWS\system32\dllcache\shlwapi.dll
+ 2004-08-09 21:00:00 1,744 —-a-w C:\WINDOWS\system32\dllcache\sound.drv
- 2006-08-14 10:34:41 332,928 —-a-w C:\WINDOWS\system32\dllcache\srv.sys
+ 2008-08-28 10:04:17 333,056 —-a-w C:\WINDOWS\system32\dllcache\srv.sys
+ 2004-08-09 21:00:00 3,360 —-a-w C:\WINDOWS\system32\dllcache\system.drv
- 2006-04-20 11:51:50 359,808 —-a-w C:\WINDOWS\system32\dllcache\tcpip.sys
+ 2008-06-20 10:45:13 360,320 —-a-w C:\WINDOWS\system32\dllcache\tcpip.sys
- 2006-08-16 09:37:30 225,664 —-a-w C:\WINDOWS\system32\dllcache\tcpip6.sys
+ 2008-06-20 09:52:06 225,920 —-a-w C:\WINDOWS\system32\dllcache\tcpip6.sys
+ 2004-08-09 21:00:00 4,048 —-a-w C:\WINDOWS\system32\dllcache\timer.drv
- 2007-10-11 05:57:40 617,984 —-a-w C:\WINDOWS\system32\dllcache\urlmon.dll
+ 2008-08-20 05:33:19 619,008 —-a-w C:\WINDOWS\system32\dllcache\urlmon.dll
+ 2004-08-04 02:58:46 15,104 —-a-w C:\WINDOWS\system32\dllcache\usbscan.sys
- 2004-08-09 21:00:00 417,792 —-a-w C:\WINDOWS\system32\dllcache\vbscript.dll
+ 2007-12-18 14:40:58 417,792 —-a-w C:\WINDOWS\system32\dllcache\vbscript.dll
+ 2004-08-09 21:00:00 2,176 —-a-w C:\WINDOWS\system32\dllcache\vga.drv
+ 2004-08-04 07:56:58 23,552 —-a-w C:\WINDOWS\system32\dllcache\wdmaud.drv
+ 2004-08-09 21:00:00 13,600 —-a-w C:\WINDOWS\system32\dllcache\wfwnet.drv
- 2007-03-08 13:47:48 1,843,584 —-a-w C:\WINDOWS\system32\dllcache\win32k.sys
+ 2008-09-15 11:57:41 1,846,016 —-a-w C:\WINDOWS\system32\dllcache\win32k.sys
- 2007-10-11 05:57:41 666,112 —-a-w C:\WINDOWS\system32\dllcache\wininet.dll
+ 2008-08-20 05:33:19 667,648 —-a-w C:\WINDOWS\system32\dllcache\wininet.dll
+ 2004-08-09 21:00:00 2,864 —-a-w C:\WINDOWS\system32\dllcache\winsock.dll
+ 2004-08-09 21:00:00 146,432 —-a-w C:\WINDOWS\system32\dllcache\winspool.drv
+ 2004-08-09 21:00:00 2,112 —-a-w C:\WINDOWS\system32\dllcache\winspool.exe
+ 2004-08-09 21:00:00 2,736 —-a-w C:\WINDOWS\system32\dllcache\wowdeb.exe
- 2007-07-30 23:19:36 549,720 —-a-w C:\WINDOWS\system32\dllcache\wuapi.dll
+ 2008-07-19 02:09:44 563,912 —-a-w C:\WINDOWS\system32\dllcache\wuapi.dll
- 2007-07-30 23:19:16 53,080 —-a-w C:\WINDOWS\system32\dllcache\wuauclt.exe
+ 2008-07-19 02:10:42 53,448 —-a-w C:\WINDOWS\system32\dllcache\wuauclt.exe
- 2007-07-30 23:19:42 1,712,984 —-a-w C:\WINDOWS\system32\dllcache\wuaueng.dll
+ 2008-07-19 02:09:42 1,811,656 —-a-w C:\WINDOWS\system32\dllcache\wuaueng.dll
- 2007-07-30 23:19:32 325,976 —-a-w C:\WINDOWS\system32\dllcache\wucltui.dll
+ 2008-07-19 02:09:46 325,832 —-a-w C:\WINDOWS\system32\dllcache\wucltui.dll
- 2007-07-30 23:18:40 33,624 —-a-w C:\WINDOWS\system32\dllcache\wups.dll
+ 2008-07-19 02:10:20 36,552 —-a-w C:\WINDOWS\system32\dllcache\wups.dll
- 2007-07-30 23:19:28 203,096 —-a-w C:\WINDOWS\system32\dllcache\wuweb.dll
+ 2008-07-19 02:09:44 205,000 —-a-w C:\WINDOWS\system32\dllcache\wuweb.dll
- 2006-02-28 16:41:34 61,440 —-a-w C:\WINDOWS\system32\dns-sd.exe
+ 2007-07-24 19:17:08 81,920 —-a-w C:\WINDOWS\system32\dns-sd.exe
- 2006-06-26 17:37:10 148,480 —-a-w C:\WINDOWS\system32\dnsapi.dll
+ 2008-06-20 17:41:10 148,992 —-a-w C:\WINDOWS\system32\dnsapi.dll
- 2004-08-09 21:00:00 45,568 —-a-w C:\WINDOWS\system32\dnsrslvr.dll
+ 2008-02-20 05:32:43 45,568 —-a-w C:\WINDOWS\system32\dnsrslvr.dll
- 2006-02-28 16:41:22 53,248 —-a-w C:\WINDOWS\system32\dnssd.dll
+ 2007-07-24 19:17:08 61,440 —-a-w C:\WINDOWS\system32\dnssd.dll
- 2004-08-09 21:00:00 138,496 —-a-w C:\WINDOWS\system32\drivers\afd.sys
+ 2008-08-14 09:51:43 138,368 —-a-w C:\WINDOWS\system32\drivers\afd.sys
+ 2008-06-13 13:10:50 272,128 ——w C:\WINDOWS\system32\drivers\bthport.sys
+ 2005-08-19 10:00:00 2,432 —-a-w C:\WINDOWS\system32\drivers\cdr4_xp.sys
+ 2005-08-19 10:00:00 2,560 —-a-w C:\WINDOWS\system32\drivers\cdralw2k.sys
+ 2004-08-04 06:07:58 2,944 —-a-w C:\WINDOWS\system32\drivers\drmkaud.sys
- 2006-09-19 20:44:04 15,664 —-a-w C:\WINDOWS\system32\drivers\GEARAspiWDM.sys
+ 2008-01-29 16:01:28 16,168 —-a-w C:\WINDOWS\system32\drivers\GEARAspiWDM.sys
+ 2007-11-02 19:36:10 18,176 —-a-w C:\WINDOWS\system32\drivers\motccgp.sys
+ 2007-01-22 23:33:00 7,680 —-a-w C:\WINDOWS\system32\drivers\motccgpfl.sys
- 2007-05-07 19:11:22 42,112 —-a-w C:\WINDOWS\system32\drivers\motodrv.sys
+ 2007-10-10 21:41:50 42,112 —-a-w C:\WINDOWS\system32\drivers\motodrv.sys
+ 2007-06-18 19:18:26 23,680 —-a-w C:\WINDOWS\system32\drivers\motport.sys
+ 2007-11-02 19:51:28 6,400 —-a-w C:\WINDOWS\system32\drivers\motswch.sys
- 2004-08-09 21:00:00 181,248 —-a-w C:\WINDOWS\system32\drivers\mrxdav.sys
+ 2007-12-18 09:51:35 179,584 —-a-w C:\WINDOWS\system32\drivers\mrxdav.sys
+ 2004-08-09 21:00:00 2,944 —-a-w C:\WINDOWS\system32\drivers\null.sys
- 2006-07-13 08:48:58 202,240 —-a-w C:\WINDOWS\system32\drivers\rmcast.sys
+ 2008-05-08 12:28:49 202,752 —-a-w C:\WINDOWS\system32\drivers\rmcast.sys
- 2006-04-20 11:51:50 359,808 —-a-w C:\WINDOWS\system32\drivers\tcpip.sys
+ 2008-06-20 10:45:13 360,320 —-a-w C:\WINDOWS\system32\drivers\tcpip.sys
- 2006-08-16 09:37:30 225,664 —-a-w C:\WINDOWS\system32\drivers\tcpip6.sys
+ 2008-06-20 09:52:06 225,920 —-a-w C:\WINDOWS\system32\drivers\tcpip6.sys
+ 2004-08-04 02:58:46 15,104 —-a-w C:\WINDOWS\system32\drivers\usbscan.sys
+ 2007-11-02 19:36:10 18,176 -c–a-w C:\WINDOWS\system32\DRVSTORE\motccgp_C44BD27554FC39921B7092EFB543B90AF6DFE9E6\motccgp.sys
+ 2007-01-22 23:33:00 7,680 -c–a-w C:\WINDOWS\system32\DRVSTORE\motccgp_C44BD27554FC39921B7092EFB543B90AF6DFE9E6\motccgpfl.sys
+ 2007-11-02 19:51:28 6,400 -c–a-w C:\WINDOWS\system32\DRVSTORE\motccgp_C44BD27554FC39921B7092EFB543B90AF6DFE9E6\motswch.sys
+ 2006-11-13 19:45:54 1,419,232 -c–a-w C:\WINDOWS\system32\DRVSTORE\motccgp_C44BD27554FC39921B7092EFB543B90AF6DFE9E6\wdfcoinstaller01005.dll
+ 2007-06-18 19:18:26 23,680 -c–a-w C:\WINDOWS\system32\DRVSTORE\motmodem_1773A9D77CA457C58EA444F15EB0DD1D3A4BD531\motmodem.sys
+ 2006-11-13 19:45:54 1,419,232 -c–a-w C:\WINDOWS\system32\DRVSTORE\motmodem_1773A9D77CA457C58EA444F15EB0DD1D3A4BD531\wdfcoinstaller01005.dll
+ 2006-07-28 12:10:08 6,144 -c–a-w C:\WINDOWS\system32\DRVSTORE\motodrv_00BA6D2CC9FA3D92B1F7A501D8C2342DBC5171A4\mot_ci.dll
+ 2007-10-10 21:41:50 42,112 -c–a-w C:\WINDOWS\system32\DRVSTORE\motodrv_00BA6D2CC9FA3D92B1F7A501D8C2342DBC5171A4\motodrv.sys
+ 2007-01-24 02:36:20 6,016 -c–a-w C:\WINDOWS\system32\DRVSTORE\motousbnet_45605EBE166919E5AE82CE7DE5B7BB04045B4427\motfilt.sys
+ 2008-03-03 20:03:10 23,296 -c–a-w C:\WINDOWS\system32\DRVSTORE\motousbnet_45605EBE166919E5AE82CE7DE5B7BB04045B4427\Motousbnet.sys
+ 2007-11-02 19:51:28 6,400 -c–a-w C:\WINDOWS\system32\DRVSTORE\motousbnet_45605EBE166919E5AE82CE7DE5B7BB04045B4427\motswch.sys
+ 2006-11-13 19:45:54 1,419,232 -c–a-w C:\WINDOWS\system32\DRVSTORE\motousbnet_45605EBE166919E5AE82CE7DE5B7BB04045B4427\wdfcoinstaller01005.dll
+ 2007-06-18 19:18:26 23,680 -c–a-w C:\WINDOWS\system32\DRVSTORE\motport_48526F1C0031F7FEF3D21901B32B4ECC2BB837F6\motport.sys
+ 2006-11-13 19:45:54 1,419,232 -c–a-w C:\WINDOWS\system32\DRVSTORE\motport_48526F1C0031F7FEF3D21901B32B4ECC2BB837F6\wdfcoinstaller01005.dll
+ 2008-02-18 15:16:24 30,464 -c–a-w C:\WINDOWS\system32\DRVSTORE\usbaapl_4351B7DAFF62FD33510D77DFAE3CF8CC82517571\usbaapl.sys
- 2007-10-11 05:57:30 357,888 —-a-w C:\WINDOWS\system32\dxtmsft.dll
+ 2008-08-20 05:33:18 357,888 —-a-w C:\WINDOWS\system32\dxtmsft.dll
- 2007-10-11 05:57:30 205,824 —-a-w C:\WINDOWS\system32\dxtrans.dll
+ 2008-08-20 05:33:18 205,312 —-a-w C:\WINDOWS\system32\dxtrans.dll
+ 2003-05-21 06:27:00 64,000 —-a-w C:\WINDOWS\system32\E_FBCBAEA.DLL
+ 2000-06-07 05:01:00 34,304 —-a-w C:\WINDOWS\system32\E_FBCHAEA.DLL
+ 2004-11-25 09:07:00 79,679 —-a-w C:\WINDOWS\system32\E_FLMAEA.DLL
+ 2005-12-08 07:19:22 36,864 —-a-w C:\WINDOWS\system32\EGameEncrypt.dll
+ 2005-12-08 07:19:22 61,440 —-a-w C:\WINDOWS\system32\EGamesPlugin.dll
+ 2006-11-30 15:17:54 237,568 —-a-w C:\WINDOWS\system32\erdmpg-5.2.dll
+ 2006-09-24 18:53:42 2,518,779 —-a-w C:\WINDOWS\system32\erdmpg-enc.dll
+ 2006-09-24 18:52:04 30,693 —-a-w C:\WINDOWS\system32\erdmpg-int.dll
+ 2006-09-24 18:53:54 268,242 —-a-w C:\WINDOWS\system32\erdmpg-parse.dll
- 2005-07-26 04:39:45 243,200 —-a-w C:\WINDOWS\system32\es.dll
+ 2008-07-07 20:32:22 253,952 —-a-w C:\WINDOWS\system32\es.dll
- 2007-10-11 05:57:30 55,808 —-a-w C:\WINDOWS\system32\extmgr.dll
+ 2008-08-20 05:33:18 55,808 —-a-w C:\WINDOWS\system32\extmgr.dll
+ 2007-12-24 17:47:52 7,680 —-a-w C:\WINDOWS\system32\ff_vfw.dll
- 2003-08-03 17:56:16 1,146,184 —-a-w C:\WINDOWS\system32\FM20.DLL
+ 2006-10-26 18:10:08 1,190,688 —-a-w C:\WINDOWS\system32\FM20.DLL
- 2003-07-15 05:57:04 32,584 —-a-w C:\WINDOWS\system32\FM20ENU.DLL
+ 2006-10-26 18:10:06 33,088 —-a-w C:\WINDOWS\system32\FM20ENU.DLL
- 2007-06-22 20:50:00 1,507,832 —-a-w C:\WINDOWS\system32\FNTCACHE.DAT
+ 2008-10-15 07:11:22 1,606,168 —-a-w C:\WINDOWS\system32\FNTCACHE.DAT
- 2007-06-19 13:31:19 282,112 —-a-w C:\WINDOWS\system32\gdi32.dll
+ 2008-02-20 06:51:05 282,624 —-a-w C:\WINDOWS\system32\gdi32.dll
- 2006-09-19 20:43:58 109,360 —-a-w C:\WINDOWS\system32\GEARAspi.dll
+ 2008-01-29 16:02:30 107,368 —-a-w C:\WINDOWS\system32\GEARAspi.dll
+ 2001-01-06 05:38:10 12,288 —-a-w C:\WINDOWS\system32\httperr.dll
- 2007-10-11 05:57:31 251,904 —-a-w C:\WINDOWS\system32\iepeers.dll
+ 2008-08-20 05:33:18 251,904 —-a-w C:\WINDOWS\system32\iepeers.dll
- 2007-08-21 06:15:44 683,520 —-a-w C:\WINDOWS\system32\inetcomm.dll
+ 2008-04-11 18:50:43 683,520 —-a-w C:\WINDOWS\system32\inetcomm.dll
- 2002-08-21 12:10:16 204,800 —-a-w C:\WINDOWS\system32\INKED.DLL
+ 2006-10-26 17:45:04 207,360 —-a-w C:\WINDOWS\system32\INKED.DLL
- 2007-10-11 05:57:31 96,256 —-a-w C:\WINDOWS\system32\inseng.dll
+ 2008-08-20 05:33:18 96,256 —-a-w C:\WINDOWS\system32\inseng.dll
- 2007-07-12 05:22:00 135,168 —-a-w C:\WINDOWS\system32\java.exe
+ 2007-09-25 03:30:28 135,168 —-a-w C:\WINDOWS\system32\java.exe
- 2007-07-12 05:22:04 135,168 —-a-w C:\WINDOWS\system32\javaw.exe
+ 2007-09-25 03:30:30 135,168 —-a-w C:\WINDOWS\system32\javaw.exe
- 2007-07-12 06:22:38 139,264 —-a-w C:\WINDOWS\system32\javaws.exe
+ 2007-09-25 04:31:42 139,264 —-a-w C:\WINDOWS\system32\javaws.exe
- 2007-11-14 07:26:56 450,560 —-a-w C:\WINDOWS\system32\jscript.dll
+ 2007-12-18 14:40:58 450,560 —-a-w C:\WINDOWS\system32\jscript.dll
- 2007-10-11 05:57:31 16,384 —-a-w C:\WINDOWS\system32\jsproxy.dll
+ 2008-08-20 05:33:19 16,384 —-a-w C:\WINDOWS\system32\jsproxy.dll
+ 2004-08-09 21:00:00 2,000 —-a-w C:\WINDOWS\system32\keyboard.drv
+ 2005-11-05 23:34:50 145,408 —-a-w C:\WINDOWS\system32\Lame.exe
+ 2003-08-07 20:01:50 237,568 —-a-w C:\WINDOWS\system32\lame_enc.dll
+ 2004-08-09 21:00:00 221,600 —-a-w C:\WINDOWS\system32\lanman.drv
+ 2008-08-31 17:58:10 38,912 —-a-w C:\WINDOWS\system32\LoveFly.dll
- 2006-08-17 12:28:27 721,920 —-a-w C:\WINDOWS\system32\lsasrv.dll
+ 2007-11-07 09:26:56 721,920 —-a-w C:\WINDOWS\system32\lsasrv.dll
+ 2004-08-09 21:00:00 2,560 —-a-w C:\WINDOWS\system32\lz32.dll
+ 2008-03-25 02:32:44 218,496 —-a-r C:\WINDOWS\system32\Macromed\Flash\FlashUtil9f.exe
- 2006-08-15 22:57:10 2,078,344 —-a-w C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
+ 2007-11-21 00:52:38 2,884,992 —-a-w C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
+ 2007-11-21 00:52:40 218,496 —-a-w C:\WINDOWS\system32\Macromed\Flash\NPSWF32_FlashUtil.exe
+ 2008-09-28 02:03:02 74,137 —-a-w C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
+ 2008-02-18 06:16:55 70,264 —-a-w C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
+ 2006-10-21 17:59:59 262,144 —-a-w C:\WINDOWS\system32\Manipulate.dll
+ 2004-08-09 21:00:00 73,376 —-a-w C:\WINDOWS\system32\mciavi.drv
+ 2004-08-09 21:00:00 25,264 —-a-w C:\WINDOWS\system32\mciseq.drv
+ 2004-08-09 21:00:00 28,160 —-a-w C:\WINDOWS\system32\mciwave.drv
- 2003-03-19 04:20:00 1,060,864 —-a-w C:\WINDOWS\system32\mfc71.dll
+ 2003-03-19 18:19:58 1,060,864 —-a-w C:\WINDOWS\system32\MFC71.dll
+ 2004-08-09 21:00:00 2,032 —-a-w C:\WINDOWS\system32\mouse.drv
- 2007-12-02 23:00:05 18,684,536 —-a-w C:\WINDOWS\system32\MRT.exe
+ 2008-10-07 19:19:40 16,721,856 —-a-w C:\WINDOWS\system32\MRT.exe
+ 2004-08-09 21:00:00 20,480 —-a-w C:\WINDOWS\system32\msacm32.drv
+ 2004-02-23 05:00:00 78,848 —-a-w C:\WINDOWS\system32\MSBIND.DLL
- 2005-06-29 01:46:00 74,240 —-a-w C:\WINDOWS\system32\mscms.dll
+ 2008-06-24 16:23:05 74,240 —-a-w C:\WINDOWS\system32\mscms.dll
- 2007-04-13 07:21:14 271,360 —-a-w C:\WINDOWS\system32\mscoree.dll
+ 2007-10-24 05:47:38 282,112 —-a-w C:\WINDOWS\system32\mscoree.dll
- 2005-09-23 11:28:52 150,016 —-a-w C:\WINDOWS\system32\mscorier.dll
+ 2007-10-24 05:47:38 158,720 —-a-w C:\WINDOWS\system32\mscorier.dll
- 2005-09-23 11:28:52 74,240 —-a-w C:\WINDOWS\system32\mscories.dll
+ 2007-10-24 05:47:38 84,480 —-a-w C:\WINDOWS\system32\mscories.dll
- 2004-08-09 21:00:00 512,029 —-a-w C:\WINDOWS\system32\msexch40.dll
+ 2008-03-25 04:50:28 518,944 —-a-w C:\WINDOWS\system32\msexch40.dll
- 2004-08-09 21:00:00 319,517 —-a-w C:\WINDOWS\system32\msexcl40.dll
+ 2008-03-25 04:50:30 326,432 —-a-w C:\WINDOWS\system32\msexcl40.dll
+ 2004-08-09 21:00:00 188,416 —-a-w C:\WINDOWS\system32\msh261.drv
+ 2004-08-10 04:00:00 294,912 —-a-w C:\WINDOWS\system32\msh263.drv
- 2007-10-30 09:55:21 3,065,856 —-a-w C:\WINDOWS\system32\mshtml.dll
+ 2008-08-20 05:33:20 3,067,392 —-a-w C:\WINDOWS\system32\mshtml.dll
- 2007-10-11 05:57:36 449,024 —-a-w C:\WINDOWS\system32\mshtmled.dll
+ 2008-08-20 05:33:19 449,024 —-a-w C:\WINDOWS\system32\mshtmled.dll
- 2004-08-09 21:00:00 1,507,356 —-a-w C:\WINDOWS\system32\msjet40.dll
+ 2008-03-25 04:50:34 1,516,568 —-a-w C:\WINDOWS\system32\msjet40.dll
- 2004-08-10 04:00:00 358,976 —-a-w C:\WINDOWS\system32\msjetoledb40.dll
+ 2008-03-25 04:50:40 355,112 —-a-w C:\WINDOWS\system32\msjetoledb40.dll
- 2004-08-09 21:00:00 151,583 —-a-w C:\WINDOWS\system32\msjint40.dll
+ 2008-03-27 08:12:54 151,583 —-a-w C:\WINDOWS\system32\msjint40.dll
- 2004-08-09 21:00:00 53,279 —-a-w C:\WINDOWS\system32\msjter40.dll
+ 2008-03-25 04:50:42 60,192 —-a-w C:\WINDOWS\system32\msjter40.dll
- 2004-08-09 21:00:00 241,693 —-a-w C:\WINDOWS\system32\msjtes40.dll
+ 2008-03-25 04:50:42 248,608 —-a-w C:\WINDOWS\system32\msjtes40.dll
- 2004-08-09 21:00:00 213,023 —-a-w C:\WINDOWS\system32\msltus40.dll
+ 2008-03-25 04:50:44 219,936 —-a-w C:\WINDOWS\system32\msltus40.dll
+ 2006-10-26 23:56:10 32,592 —-a-w C:\WINDOWS\system32\msonpmon.dll
- 2004-08-09 21:00:00 348,189 —-a-w C:\WINDOWS\system32\mspbde40.dll
+ 2008-03-25 04:50:45 355,104 —-a-w C:\WINDOWS\system32\mspbde40.dll
- 2007-10-11 05:57:36 146,432 —-a-w C:\WINDOWS\system32\msrating.dll
+ 2008-08-20 05:33:18 146,432 —-a-w C:\WINDOWS\system32\msrating.dll
- 2004-08-09 21:00:00 421,919 —-a-w C:\WINDOWS\system32\msrd2x40.dll
+ 2008-03-25 04:50:47 432,928 —-a-w C:\WINDOWS\system32\msrd2x40.dll
- 2004-08-09 21:00:00 315,423 —-a-w C:\WINDOWS\system32\msrd3x40.dll
+ 2008-03-25 04:50:49 322,336 —-a-w C:\WINDOWS\system32\msrd3x40.dll
- 2004-08-09 21:00:00 552,989 —-a-w C:\WINDOWS\system32\msrepl40.dll
+ 2008-03-25 04:50:52 559,904 —-a-w C:\WINDOWS\system32\msrepl40.dll
- 2004-08-09 21:00:00 258,077 —-a-w C:\WINDOWS\system32\mstext40.dll
+ 2008-03-25 04:50:55 264,992 —-a-w C:\WINDOWS\system32\mstext40.dll
- 2007-10-11 05:57:37 532,480 —-a-w C:\WINDOWS\system32\mstime.dll
+ 2008-08-20 05:33:18 532,480 —-a-w C:\WINDOWS\system32\mstime.dll
- 2003-03-19 03:14:52 499,712 —-a-w C:\WINDOWS\system32\msvcp71.dll
+ 2003-08-27 20:43:16 499,712 —-a-w C:\WINDOWS\system32\msvcp71.dll
- 2002-12-18 21:46:26 344,064 —-a-w C:\WINDOWS\system32\msvcr70.dll
+ 2002-01-05 20:37:26 344,064 —-a-w C:\WINDOWS\system32\msvcr70.dll
- 2004-02-25 17:05:28 348,160 —-a-w C:\WINDOWS\system32\msvcr71.dll
+ 2003-02-22 01:42:20 348,160 —-a-w C:\WINDOWS\system32\msvcr71.dll
- 2004-08-09 21:00:00 831,519 —-a-w C:\WINDOWS\system32\mswdat10.dll
+ 2008-03-25 04:50:57 838,432 —-a-w C:\WINDOWS\system32\mswdat10.dll
- 2004-08-09 21:00:00 245,248 —-a-w C:\WINDOWS\system32\mswsock.dll
+ 2008-06-20 17:41:10 245,248 —-a-w C:\WINDOWS\system32\mswsock.dll
- 2004-08-09 21:00:00 614,429 —-a-w C:\WINDOWS\system32\mswstr10.dll
+ 2008-03-25 04:50:58 621,344 —-a-w C:\WINDOWS\system32\mswstr10.dll
- 2004-08-09 21:00:00 348,189 —-a-w C:\WINDOWS\system32\msxbde40.dll
+ 2008-03-25 04:50:58 355,104 —-a-w C:\WINDOWS\system32\msxbde40.dll
- 2006-12-22 17:02:36 6,144 —-a-w C:\WINDOWS\system32\mui\0409\mscorees.dll
+ 2007-10-24 05:47:44 15,360 —-a-w C:\WINDOWS\system32\mui\0409\mscorees.dll
+ 2005-11-17 17:57:30 258,560 —-a-w C:\WINDOWS\system32\MusicTagsAX.dll
+ 2004-11-04 18:31:24 479,744 —-a-w C:\WINDOWS\system32\NCTAudioCDGrabber2.dll
+ 2005-06-01 17:16:22 778,240 —-a-w C:\WINDOWS\system32\NCTAudioCompress2.dll
+ 2005-07-21 18:33:30 2,846,720 —-a-w C:\WINDOWS\system32\NCTAudioCompress3.dll
+ 2005-06-01 16:54:02 634,880 —-a-w C:\WINDOWS\system32\NCTAudioEditor2.dll
+ 2005-06-01 17:11:04 877,568 —-a-w C:\WINDOWS\system32\NCTAudioFile2.dll
+ 2005-06-16 01:04:46 90,112 —-a-w C:\WINDOWS\system32\NCTAudioFormatSettings3.dll
+ 2003-12-08 16:16:21 327,680 —-a-w C:\WINDOWS\system32\NCTAudioGrabber2.dll
+ 2005-06-01 17:15:42 966,144 —-a-w C:\WINDOWS\system32\NCTAudioInformation2.dll
+ 2005-06-01 17:11:48 467,456 —-a-w C:\WINDOWS\system32\NCTAudioPlayer2.dll
+ 2005-06-01 17:12:12 467,968 —-a-w C:\WINDOWS\system32\NCTAudioRecord2.dll
+ 2005-05-31 21:02:34 522,752 —-a-w C:\WINDOWS\system32\NCTAudioTransform2.dll
+ 2005-03-28 20:54:44 478,208 —-a-w C:\WINDOWS\system32\NCTAudioVisualization2.dll
+ 2005-06-07 23:11:26 382,464 —-a-w C:\WINDOWS\system32\NCTAVIFile.dll
+ 2005-03-18 20:01:46 626,688 —-a-w C:\WINDOWS\system32\NCTImageFile.dll
+ 2005-07-19 22:53:48 249,856 —-a-w C:\WINDOWS\system32\NCTQuickTimeFile.dll
+ 2005-04-15 00:07:48 780,288 —-a-w C:\WINDOWS\system32\NCTVideoCompress.dll
+ 2005-07-08 23:31:48 495,104 —-a-w C:\WINDOWS\system32\NCTVideoCoreM.dll
+ 2005-06-29 21:28:40 188,416 —-a-w C:\WINDOWS\system32\NCTVideoFile.dll
+ 2005-03-30 21:05:06 636,416 —-a-w C:\WINDOWS\system32\NCTVideoTransform.dll
+ 2005-05-26 17:00:34 403,968 —-a-w C:\WINDOWS\system32\NCTWMAFile2.dll
+ 2005-07-01 23:09:00 215,552 —-a-w C:\WINDOWS\system32\NCTWMVFile.dll
+ 2004-08-09 21:00:00 2,656 —-a-w C:\WINDOWS\system32\netware.drv
+ 2007-01-25 08:52:36 65,536 —-a-w C:\WINDOWS\system32\NMSAccess.exe
+ 2007-01-25 13:46:04 1,077,248 —-a-w C:\WINDOWS\system32\NMSDVDX.dll
+ 2007-01-25 13:45:50 1,101,824 —-a-w C:\WINDOWS\system32\NMSDVDXU.dll
- 2007-02-28 08:38:55 2,057,600 —-a-w C:\WINDOWS\system32\ntkrnlpa.exe
+ 2008-08-14 09:22:13 2,057,728 —-a-w C:\WINDOWS\system32\ntkrnlpa.exe
- 2007-02-28 09:10:57 2,180,352 —-a-w C:\WINDOWS\system32\ntoskrnl.exe
+ 2008-08-14 10:00:45 2,180,352 —-a-w C:\WINDOWS\system32\ntoskrnl.exe
+ 2002-07-19 16:48:22 157,696 —-a-w C:\WINDOWS\system32\OggEnc.exe
- 2007-05-17 11:28:05 549,376 —-a-w C:\WINDOWS\system32\oleaut32.dll
+ 2007-12-04 18:38:13 550,912 —-a-w C:\WINDOWS\system32\oleaut32.dll
+ 2005-10-17 16:06:18 1,972 —-a-w C:\WINDOWS\system32\pcintro\security.cmd
- 2007-11-10 19:53:35 63,220 —-a-w C:\WINDOWS\system32\perfc009.dat
+ 2008-06-05 20:55:10 65,248 —-a-w C:\WINDOWS\system32\perfc009.dat
- 2007-11-10 19:53:35 402,736 —-a-w C:\WINDOWS\system32\perfh009.dat
+ 2008-06-05 20:55:10 410,904 —-a-w C:\WINDOWS\system32\perfh009.dat
- 2007-10-11 05:57:37 39,424 —-a-w C:\WINDOWS\system32\pngfilt.dll
+ 2008-08-20 05:33:18 39,424 —-a-w C:\WINDOWS\system32\pngfilt.dll
+ 2007-11-29 16:52:32 60,273 —-a-w C:\WINDOWS\system32\pthreadGC2.dll
+ 2001-08-18 02:36:30 5,632 —-a-w C:\WINDOWS\system32\ptpusb.dll
+ 2004-08-04 04:56:46 159,232 —-a-w C:\WINDOWS\system32\ptpusd.dll
+ 2008-02-21 17:11:48 2,117,632 —-a-w C:\WINDOWS\system32\python25.dll
- 2007-10-29 22:35:13 1,287,680 —-a-w C:\WINDOWS\system32\quartz.dll
+ 2008-05-07 04:55:40 1,288,192 —-a-w C:\WINDOWS\system32\quartz.dll
- 2007-08-26 02:57:14 432,656 —-a-w C:\WINDOWS\system32\Restore\rstrlog.dat
+ 2008-09-12 08:55:51 954,768 —-a-w C:\WINDOWS\system32\Restore\rstrlog.dat
- 1998-03-25 04:54:08 15,872 —-a-w C:\WINDOWS\system32\SCP32.DLL
+ 2006-07-24 14:50:40 39,728 —-a-w C:\WINDOWS\system32\SCP32.DLL
- 2007-10-11 05:57:39 1,498,112 —-a-w C:\WINDOWS\system32\shdocvw.dll
+ 2008-08-20 05:33:19 1,499,136 —-a-w C:\WINDOWS\system32\shdocvw.dll
- 2007-10-11 05:57:40 474,112 —-a-w C:\WINDOWS\system32\shlwapi.dll
+ 2008-08-20 05:33:19 474,112 —-a-w C:\WINDOWS\system32\shlwapi.dll
+ 2008-10-23 10:01:38 37,376 —-a-w C:\WINDOWS\system32\smart.dll
+ 2008-07-19 02:10:20 36,552 —-a-w C:\WINDOWS\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\7.2.6001.784\wups.dll
+ 2008-07-19 02:10:40 45,768 —-a-w C:\WINDOWS\system32\SoftwareDistribution\Setup\ServiceStartup\wups2.dll\7.2.6001.784\wups2.dll
+ 2004-08-09 21:00:00 1,744 —-a-w C:\WINDOWS\system32\sound.drv
- 2006-10-09 01:51:14 14,640 —-a-w C:\WINDOWS\system32\spmsg.dll
+ 2007-11-30 11:18:51 17,272 ——w C:\WINDOWS\system32\spmsg.dll
+ 2005-03-08 08:00:00 2,693 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\E_FAIFAEA.DAT
+ 2005-02-25 05:01:00 59,904 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\E_FAIRAEA.DLL
+ 2005-03-08 08:00:00 192,512 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\E_FAMDAEA.EXE
+ 2005-02-02 08:00:00 110,592 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\E_FAMTAEA.EXE
+ 2005-03-08 08:00:00 397,312 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\E_FAPRAEA.DLL
+ 2005-01-24 08:00:00 86,016 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\E_FARNAEA.EXE
+ 2004-02-19 07:02:00 94,208 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\E_FASKAEA.DLL
+ 2005-03-08 08:00:00 454,656 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\E_FASRAEA.DLL
+ 2005-03-08 08:00:00 98,304 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\E_FATIAEA.EXE
+ 2004-02-18 05:10:00 98,304 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\E_FBAGAEA.DLL
+ 2004-11-25 09:02:02 159,744 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\E_FBAPAEA.DLL
+ 2005-07-06 08:22:00 155,648 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\E_FBINAEA.EXE
+ 2004-12-16 09:06:00 192,512 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\E_FBLPAEA.DLL
+ 2002-07-16 08:00:00 29,184 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\E_FBSRAEA.EXE
+ 2005-06-24 08:00:00 315,392 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\E_FCONAEA.DLL
+ 2005-01-24 09:00:00 55,296 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\E_FDSPAEA.DLL
+ 2004-04-27 06:01:00 77,824 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\E_FGRCAEA.DLL
+ 2005-03-24 05:00:00 464,384 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\E_FHBRAEA.DLL
+ 2005-01-28 08:10:00 258,048 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\E_FHM0AEA.DLL
+ 2005-03-24 05:00:00 73,728 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\E_FHSRAEA.DLL
+ 2004-04-08 08:10:00 225,280 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\E_FHT0AEA.DLL
+ 2005-03-17 12:00:12 165,376 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\E_FHUTAEA.DLL
+ 2005-03-17 12:00:12 20,480 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\E_FHUTAEA.EXE
+ 2005-03-07 08:00:00 329,216 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\E_FJBCAEA.DLL
+ 2005-01-24 09:00:00 72,704 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\E_FMAIAEA.DLL
+ 2005-03-22 08:10:00 114,688 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\E_FMW0AEA.DLL
+ 2004-01-29 08:00:00 145,408 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\E_FPREAEA.EXE
+ 2005-02-04 08:00:00 511,488 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\E_FPRUAEA.DLL
+ 2005-04-11 08:10:00 1,593,344 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\E_FSR0AEA.DLL
+ 2005-03-18 09:00:00 521,216 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\E_FUICAEA.DLL
+ 2005-03-10 07:01:00 921,600 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\E_FUIRAEA.DLL
+ 2004-02-19 06:03:00 65,536 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\E_S00RP1.EXE
+ 2003-11-12 05:02:00 81,920 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\EBPSHRE4.DLL
+ 2001-08-18 02:34:10 11,776 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\EPNDRV01.DLL
+ 2001-08-18 02:36:16 78,848 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\EPNGUI10.DLL
+ 2001-08-18 02:36:16 334,336 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\EPNHTX01.DLL
+ 2005-02-14 05:09:00 53,248 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\EPSET32.DLL
+ 2004-04-21 04:00:00 5,729 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\EPUPDATE.DAT
+ 2005-02-25 10:15:00 761,856 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\EPUPDATE.EXE
+ 2006-10-26 23:56:16 864,080 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\msonpdrv.dll
+ 2006-10-26 23:56:14 67,408 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\msonpui.dll
+ 2004-04-30 05:07:00 122,880 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\SAGENT4.EXE
+ 2004-08-04 04:56:48 264,704 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\UNIDRV.DLL
+ 2004-08-04 04:56:48 197,120 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\UNIDRVUI.DLL
+ 2004-08-04 04:56:36 619,520 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\UNIRES.DLL
+ 2005-03-08 08:00:00 2,693 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\epsonstylus_cx4200f49e\E_FAIFAEA.DAT
+ 2005-02-25 05:01:00 59,904 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\epsonstylus_cx4200f49e\E_FAIRAEA.DLL
+ 2005-03-08 08:00:00 192,512 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\epsonstylus_cx4200f49e\E_FAMDAEA.EXE
+ 2005-02-02 08:00:00 110,592 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\epsonstylus_cx4200f49e\E_FAMTAEA.EXE
+ 2005-03-08 08:00:00 397,312 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\epsonstylus_cx4200f49e\E_FAPRAEA.DLL
+ 2005-01-24 08:00:00 86,016 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\epsonstylus_cx4200f49e\E_FARNAEA.EXE
+ 2004-02-19 07:02:00 94,208 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\epsonstylus_cx4200f49e\E_FASKAEA.DLL
+ 2005-03-08 08:00:00 454,656 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\epsonstylus_cx4200f49e\E_FASRAEA.DLL
+ 2005-03-08 08:00:00 98,304 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\epsonstylus_cx4200f49e\E_FATIAEA.EXE
+ 2004-02-18 05:10:00 98,304 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\epsonstylus_cx4200f49e\E_FBAGAEA.DLL
+ 2004-11-25 09:02:02 159,744 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\epsonstylus_cx4200f49e\E_FBAPAEA.DLL
+ 2005-07-06 08:22:00 155,648 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\epsonstylus_cx4200f49e\E_FBINAEA.EXE
+ 2004-12-16 09:06:00 192,512 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\epsonstylus_cx4200f49e\E_FBLPAEA.DLL
+ 2002-07-16 08:00:00 29,184 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\epsonstylus_cx4200f49e\E_FBSRAEA.EXE
+ 2005-06-24 08:00:00 315,392 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\epsonstylus_cx4200f49e\E_FCONAEA.DLL
+ 2005-01-24 09:00:00 55,296 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\epsonstylus_cx4200f49e\E_FDSPAEA.DLL
+ 2004-04-27 06:01:00 77,824 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\epsonstylus_cx4200f49e\E_FGRCAEA.DLL
+ 2005-03-24 05:00:00 464,384 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\epsonstylus_cx4200f49e\E_FHBRAEA.DLL
+ 2005-01-28 08:10:00 258,048 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\epsonstylus_cx4200f49e\E_FHM0AEA.DLL
+ 2005-03-24 05:00:00 73,728 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\epsonstylus_cx4200f49e\E_FHSRAEA.DLL
+ 2004-04-08 08:10:00 225,280 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\epsonstylus_cx4200f49e\E_FHT0AEA.DLL
+ 2005-03-17 12:00:12 165,376 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\epsonstylus_cx4200f49e\E_FHUTAEA.DLL
+ 2005-03-17 12:00:12 20,480 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\epsonstylus_cx4200f49e\E_FHUTAEA.EXE
+ 2005-03-07 08:00:00 329,216 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\epsonstylus_cx4200f49e\E_FJBCAEA.DLL
+ 2005-01-24 09:00:00 72,704 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\epsonstylus_cx4200f49e\E_FMAIAEA.DLL
+ 2005-03-22 08:10:00 114,688 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\epsonstylus_cx4200f49e\E_FMW0AEA.DLL
+ 2004-01-29 08:00:00 145,408 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\epsonstylus_cx4200f49e\E_FPREAEA.EXE
+ 2005-02-04 08:00:00 511,488 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\epsonstylus_cx4200f49e\E_FPRUAEA.DLL
+ 2005-04-11 08:10:00 1,593,344 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\epsonstylus_cx4200f49e\E_FSR0AEA.DLL
+ 2005-03-18 09:00:00 521,216 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\epsonstylus_cx4200f49e\E_FUICAEA.DLL
+ 2005-03-10 07:01:00 921,600 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\epsonstylus_cx4200f49e\E_FUIRAEA.DLL
+ 2004-02-19 06:03:00 65,536 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\epsonstylus_cx4200f49e\E_S00RP1.EXE
+ 2003-11-12 05:02:00 81,920 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\epsonstylus_cx4200f49e\EBPSHRE4.DLL
+ 2005-02-14 05:09:00 53,248 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\epsonstylus_cx4200f49e\EPSET32.DLL
+ 2004-04-21 04:00:00 5,729 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\epsonstylus_cx4200f49e\EPUPDATE.DAT
+ 2005-02-25 10:15:00 761,856 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\epsonstylus_cx4200f49e\EPUPDATE.EXE
+ 2004-04-30 05:07:00 122,880 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\epsonstylus_cx4200f49e\SAGENT4.EXE
+ 2004-04-21 04:00:00 5,729 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\EPUPDATE.DAT
+ 2005-02-25 10:15:00 761,856 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\EPUPDATE.EXE
+ 2006-10-26 23:56:16 864,080 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\msonpdrv.dll
+ 2006-10-26 23:56:14 67,408 —-a-w C:\WINDOWS\system32\spool\drivers\w32x86\msonpui.dll
+ 2006-10-26 23:56:12 33,104 —-a-w C:\WINDOWS\system32\spool\prtprocs\w32x86\msonpppr.dll
+ 2004-08-09 21:00:00 3,360 —-a-w C:\WINDOWS\system32\system.drv
+ 2004-08-09 21:00:00 4,048 —-a-w C:\WINDOWS\system32\timer.drv
- 2007-11-13 11:31:11 60,416 —-a-w C:\WINDOWS\system32\tzchange.exe
+ 2008-07-14 11:09:18 62,976 —-a-w C:\WINDOWS\system32\tzchange.exe
+ 2004-02-01 19:21:56 97,280 —-a-w C:\WINDOWS\system32\Uncommon.dll
- 2007-10-11 05:57:40 617,984 —-a-w C:\WINDOWS\system32\urlmon.dll
+ 2008-08-20 05:33:19 619,008 —-a-w C:\WINDOWS\system32\urlmon.dll
- 1999-11-25 01:40:50 40,960 —-a-w C:\WINDOWS\system32\VBAME.DLL
+ 2006-07-24 14:50:40 47,920 —-a-w C:\WINDOWS\system32\VBAME.DLL
- 2004-08-09 21:00:00 417,792 —-a-w C:\WINDOWS\system32\vbscript.dll
+ 2007-12-18 14:40:58 417,792 —-a-w C:\WINDOWS\system32\vbscript.dll
+ 2004-08-09 21:00:00 2,176 —-a-w C:\WINDOWS\system32\vga.drv
+ 2004-06-24 23:48:08 139,264 —-a-w C:\WINDOWS\system32\voltoCDX.dll
+ 2004-08-04 07:56:58 23,552 —-a-w C:\WINDOWS\system32\wdmaud.drv
+ 2004-08-09 21:00:00 13,600 —-a-w C:\WINDOWS\system32\wfwnet.drv
- 2007-03-08 13:47:48 1,843,584 —-a-w C:\WINDOWS\system32\win32k.sys
+ 2008-09-15 11:57:41 1,846,016 —-a-w C:\WINDOWS\system32\win32k.sys
- 2007-10-11 05:57:41 666,112 —-a-w C:\WINDOWS\system32\wininet.dll
+ 2008-08-20 05:33:19 667,648 —-a-w C:\WINDOWS\system32\wininet.dll
+ 2004-08-09 21:00:00 2,864 —-a-w C:\WINDOWS\system32\winsock.dll
+ 2004-08-09 21:00:00 146,432 —-a-w C:\WINDOWS\system32\winspool.drv
+ 2004-08-09 21:00:00 2,112 —-a-w C:\WINDOWS\system32\winspool.exe
- 2002-08-21 12:13:12 189,952 —-a-w C:\WINDOWS\system32\WISPTIS.EXE
+ 2006-10-26 17:45:04 293,376 —-a-w C:\WINDOWS\system32\WISPTIS.EXE
+ 2005-10-30 15:02:18 200,704 —-a-w C:\WINDOWS\system32\WMVCreator.dll
+ 2004-08-09 21:00:00 2,736 —-a-w C:\WINDOWS\system32\wowdeb.exe
- 2007-07-30 23:19:36 549,720 —-a-w C:\WINDOWS\system32\wuapi.dll
+ 2008-07-19 02:09:44 563,912 —-a-w C:\WINDOWS\system32\wuapi.dll
- 2007-07-30 23:19:16 53,080 —-a-w C:\WINDOWS\system32\wuauclt.exe
+ 2008-07-19 02:10:42 53,448 —-a-w C:\WINDOWS\system32\wuauclt.exe
- 2007-07-30 23:19:42 1,712,984 —-a-w C:\WINDOWS\system32\wuaueng.dll
+ 2008-07-19 02:09:42 1,811,656 —-a-w C:\WINDOWS\system32\wuaueng.dll
- 2007-07-30 23:19:32 325,976 —-a-w C:\WINDOWS\system32\wucltui.dll
+ 2008-07-19 02:09:46 325,832 —-a-w C:\WINDOWS\system32\wucltui.dll
- 2007-07-30 23:18:40 33,624 —-a-w C:\WINDOWS\system32\wups.dll
+ 2008-07-19 02:10:20 36,552 —-a-w C:\WINDOWS\system32\wups.dll
- 2007-07-30 23:19:12 43,352 —-a-w C:\WINDOWS\system32\wups2.dll
+ 2008-07-19 02:10:40 45,768 —-a-w C:\WINDOWS\system32\wups2.dll
- 2007-07-30 23:19:28 203,096 —-a-w C:\WINDOWS\system32\wuweb.dll
+ 2008-07-19 02:09:44 205,000 —-a-w C:\WINDOWS\system32\wuweb.dll
- 2007-10-29 10:04:03 350,720 —-a-w C:\WINDOWS\system32\xpsp3res.dll
+ 2008-08-19 09:20:32 351,744 —-a-w C:\WINDOWS\system32\xpsp3res.dll
+ 2000-08-31 12:00:00 49,152 —-a-w C:\WINDOWS\VFIND.exe
+ 2008-04-12 05:32:24 8,192 —-a-w C:\WINDOWS\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
+ 2006-10-26 17:40:34 95,744 —-a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_6e805841\ATL80.dll
+ 2007-10-24 05:47:56 479,232 —-a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2\msvcm80.dll
+ 2007-10-24 05:47:56 558,080 —-a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2\msvcp80.dll
+ 2007-10-24 05:47:56 635,904 —-a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2\msvcr80.dll
+ 2006-12-02 02:54:32 479,232 —-a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcm80.dll
+ 2006-12-02 02:54:34 548,864 —-a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcp80.dll
+ 2006-12-02 02:54:32 626,688 —-a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcr80.dll
+ 2006-10-26 17:40:36 1,093,632 —-a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_dec6ddd2\mfc80.dll
+ 2006-10-26 17:40:36 1,079,808 —-a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_dec6ddd2\mfc80u.dll
+ 2006-10-26 17:40:36 69,632 —-a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_dec6ddd2\mfcm80.dll
+ 2006-10-26 17:40:36 57,344 —-a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_dec6ddd2\mfcm80u.dll
+ 2006-10-26 17:40:36 40,960 —-a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_3415f6d0\mfc80CHS.dll
+ 2006-10-26 17:40:36 45,056 —-a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_3415f6d0\mfc80CHT.dll
+ 2006-10-26 17:40:36 65,536 —-a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_3415f6d0\mfc80DEU.dll
+ 2006-10-26 17:40:36 57,344 —-a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_3415f6d0\mfc80ENU.dll
+ 2006-10-26 17:40:36 61,440 —-a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_3415f6d0\mfc80ESP.dll
+ 2006-10-26 17:40:36 61,440 —-a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_3415f6d0\mfc80FRA.dll
+ 2006-10-26 17:40:36 61,440 —-a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_3415f6d0\mfc80ITA.dll
+ 2006-10-26 17:40:36 49,152 —-a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_3415f6d0\mfc80JPN.dll
+ 2006-10-26 17:40:36 49,152 —-a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_3415f6d0\mfc80KOR.dll
+ 2008-04-15 17:54:19 1,724,416 —-a-w C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.3352_x-ww_81af8e88\GdiPlus.dll
- 2007-07-11 16:07:53 258,048 —-a-w C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
+ 2008-04-12 05:32:32 258,048 —-a-w C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
- 2007-07-11 16:07:53 114,176 —-a-w C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
+ 2008-04-12 05:32:32 113,664 —-a-w C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
+ 2000-08-31 12:00:00 68,096 —-a-w C:\WINDOWS\zip.exe
.
– Snapshot reset to current date –
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Mga"="C:\WINDOWS\s?mbols\s?anregw.exe" [?]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-09 15360]
"STYLEXP"="C:\Program Files\TGTSoft\StyleXP\StyleXP.exe" [2006-05-24 1372160]
"AIM"="C:\Program Files\AIM\aim.exe" [2005-08-05 67160]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 1694208]
"µTorrent"="C:\Program Files\uTorrent\utorrent.exe" [2008-10-15 270128]
"uTorrent"="C:\Program Files\uTorrent\uTorrent.exe" [2008-10-15 270128]
"updateMgr"="C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" [2006-03-30 313472]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray"="C:\WINDOWS\ehome\ehtray.exe" [2005-09-29 67584]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2007-04-19 7700480]
"Recguard"="C:\WINDOWS\SMINST\RECGUARD.EXE" [2005-07-22 237568]
"HPBootOp"="C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" [2006-02-15 249856]
"Reminder"="C:\Windows\Creator\Remind_XP.exe" [2004-12-13 663552]
"KBD"="C:\HP\KBD\KBD.EXE" [2005-02-02 61440]
"ISUSPM Startup"="c:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe" [2004-07-27 221184]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 132496]
"HP Software Update"="C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe" [2005-02-16 49152]
"Microsoft Works Update Detection"="C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe" [2001-08-17 28738]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2007-04-19 86016]
"EPSON Stylus CX4200 Series"="C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEA.EXE" [2005-03-08 98304]
"GrooveMonitor"="C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-27 31016]
"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2008-05-27 413696]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2008-06-02 267048]
"DAEMON Tools"="C:\Program Files\DAEMON Tools\daemon.exe" [2006-11-12 157592]
"RTHDCPL"="RTHDCPL.EXE" [2006-03-08 C:\WINDOWS\RTHDCPL.EXE]
"AlwaysReady Power Message APP"="ARPWRMSG.EXE" [2005-08-02 C:\WINDOWS\arpwrmsg.exe]
"nwiz"="nwiz.exe" [2007-04-19 C:\WINDOWS\system32\nwiz.exe]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"InstallVisualStyle"= C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
"InstallTheme"= C:\WINDOWS\Resources\Themes\Royale.theme

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"vidc.I420"= i420vfw.dll

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk
backup=C:\WINDOWS\pss\Adobe Reader Speed Launch.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Compaq Connections.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Compaq Connections.lnk
backup=C:\WINDOWS\pss\Compaq Connections.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools]
–a—— 2006-11-12 06:48 157592 C:\Program Files\DAEMON Tools\daemon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Microsoft Works Portfolio]
–a—— 2004-06-23 13:22 729088 C:\Program Files\Microsoft Works\WksSb.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
–a—— 2008-05-27 10:50 413696 C:\Program Files\QuickTime\QTTask.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
-ra—— 2007-08-17 03:45 23120680 C:\Program Files\Skype\Phone\Skype.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
–a—— 2008-04-09 14:00 1271032 c:\Program Files\Steam\steam.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WorksFUD]
–a—— 2001-10-05 20:34 24576 C:\Program Files\Microsoft Works\wkfud.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001
"FirewallOverride"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"C:\\Program Files\\uTorrent\\utorrent.exe"=
"C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"C:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"C:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"C:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"C:\\Program Files\\iTunes\\iTunes.exe"=
"C:\\Program Files\\Skype\\Phone\\Skype.exe"=
"C:\\Program Files\\TVersity\\Media Server\\MediaServer.exe"=
"C:\\Program Files\\FlashFXP\\FlashFXP.exe"=
"C:\\Program Files\\AIM\\aim.exe"=
"C:\\Program Files\\LimeWire\\LimeWire.exe"=

S3 motccgp;Motorola USB Composite Device Driver;C:\WINDOWS\system32\DRIVERS\motccgp.sys [2007-11-02 18176]
S3 motccgpfl;MotCcgpFlService;C:\WINDOWS\system32\DRIVERS\motccgpfl.sys [2007-01-22 7680]
S3 MotDev;Motorola Inc. USB Device;C:\WINDOWS\system32\DRIVERS\motodrv.sys [2007-10-10 42112]
S3 motport;Motorola USB Diagnostic Port;C:\WINDOWS\system32\DRIVERS\motport.sys [2007-06-18 23680]
S3 RegGuard;RegGuard;C:\WINDOWS\system32\Drivers\regguard.sys [2007-07-19 25773]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\K]
\Shell\AutoRun\command - K:\LaunchU3.exe -a

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{5cb3a68a-aef3-11db-b978-001731c5f239}]
\Shell\AutoRun\command - J:\autorun\autorun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{5eed1971-9e45-11dd-b9e4-001731c5f239}]
\Shell\AutoRun\command - K:\LaunchU3.exe -a
.
Contents of the 'Scheduled Tasks' folder

2008-10-21 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2007-08-29 14:57]
.
- - - - ORPHANS REMOVED - - - -

HKCU-Run-QdrModule10 - C:\Program Files\QdrModule\QdrModule10.exe
HKCU-Run-Scbu - C:\DOCUME~1\COMPAQ~1\APPLIC~1\WNSXS~1\regsvr32.exe
HKCU-Run-P2kAutostart - (no file)
HKLM-Run-TkBellExe - C:\Program Files\Common Files\Real\Update_OB\realsched.exe
HKLM-Run-WinampAgent - C:\Program Files\Winamp\wianmpa.exe
HKLM-Run-MyWebSearch Plugin - C:\PROGRA~1\MYWEBS~1\bar\1.bin\M3PLUGIN.DLL
HKLM-Run-PCDrProfiler - (no file)


.
——- Supplementary Scan ——-
.
FireFox -: Profile - C:\Documents and Settings\Compaq_Administrator\Application Data\Mozilla\Firefox\Profiles\grxwnioq.default\
FireFox -: prefs.js - SEARCH.DEFAULTURL - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT329536&SearchSource=3&q=
FireFox -: prefs.js - STARTUP.HOMEPAGE - hxxp://www.myspace.com/
FF -: plugin - C:\Documents and Settings\Compaq_Administrator\Application Data\Mozilla\Firefox\Profiles\grxwnioq.default\extensions\[removed]\platform\WINNT_x86-msvc\plugins\npmnqmp07051001.dll
FF -: plugin - C:\Program Files\Adobe\Acrobat 7.0\Reader\browser\nppdf32.dll
FF -: plugin - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
FF -: plugin - C:\Program Files\Mozilla Firefox\plugins\npijjiFFPlugin1.dll
FF -: plugin - C:\Program Files\Mozilla Firefox\plugins\npmozax.dll
FF -: plugin - C:\Program Files\Mozilla Firefox\plugins\NPMyWebS.dll
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-10-23 20:52:59
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes …

scanning hidden autostart entries …

scanning hidden files …

scan completed successfully
hidden files: 0

**************************************************************************
.
———————— Other Running Processes ————————
.
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\arservice.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\ehome\ehrecvr.exe
C:\WINDOWS\ehome\ehSched.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\ehome\mcrdsvc.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\ehome\ehmsas.exe
C:\Program Files\StepMania\Program\StepMania.exe
.
**************************************************************************
.
Completion time: 2008-10-23 21:12:24 - machine was rebooted
ComboFix-quarantined-files.txt 2008-10-24 01:12:07
ComboFix2.txt 2008-01-05 17:00:34
ComboFix3.txt 2007-12-15 21:41:24

Pre-Run: 22,071,238,656 bytes free
Post-Run: 22,322,102,272 bytes free

1822 — E O F — 2008-10-15 07:03:32
Post #4
Hello

Please download the OTMoveIt3 by OldTimer or from here.
  • Save it to your desktop.
  • Please double-click OTMoveIt3.exe to run it. (Note: If you are running on Vista, right-click on the file and choose Run As Administrator).
  • Copy the lines in the codebox below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose Copy):

    :Processes
explorer.exe

:Services

:Reg
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\K]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{5cb3a68a-aef3-11db-b978-001731c5f239}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{5eed1971-9e45-11dd-b9e4-001731c5f239}]


:Files
C:\Program Files\Mozilla Firefox\plugins\NPMyWebS.dll

:Commands
[purity]
[emptytemp]
[start explorer]
[Reboot]
  • Return to OTMoveIt3, right click in the "Paste Instructions for Items to be Moved" window (under the yellow bar) and choose Paste.
  • Click the red Moveit! button.
  • Copy everything in the Results window (under the green bar) to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy), and paste it in your next reply.
  • Close OTMoveIt3
Note: If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes. In this case, after the reboot, open Notepad (Start->All Programs->Accessories->Notepad), click File->Open, in the File Name box enter *.log and press the Enter key, navigate to the C:\_OTMoveIt\MovedFiles folder, and open the newest .log file present, and copy/paste the contents of that document back here in your next post.



Disable resident protections (Antivirus…); you'll re-enable them after the scan

Download Lop S&D < here

Double-click Lop S&D.exe
Choose the language, then choose Option 1 (Search)
Wait till the end of the scan
Post the log which is created: (%SystemDrive%\lopR.txt)
Post #5
========== PROCESSES ==========
Process explorer.exe killed successfully.
========== SERVICES/DRIVERS ==========
========== REGISTRY ==========
Registry key HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\K\\ deleted successfully.
Registry key HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{5cb3a68a-aef3-11db-b978-001731c5f239}\\ deleted successfully.
Registry key HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{5eed1971-9e45-11dd-b9e4-001731c5f239}\\ deleted successfully.
========== FILES ==========
DllUnregisterServer procedure not found in C:\Program Files\Mozilla Firefox\plugins\NPMyWebS.dll
C:\Program Files\Mozilla Firefox\plugins\NPMyWebS.dll NOT unregistered.
C:\Program Files\Mozilla Firefox\plugins\NPMyWebS.dll moved successfully.
========== COMMANDS ==========
File delete failed. C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\etilqs_qLtF1RupMKccPZW4leIS scheduled to be deleted on reboot.
User's Temp folder emptied.
User's Temporary Internet Files folder emptied.
User's Internet Explorer cache folder emptied.
Local Service Temp folder emptied.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
Local Service Temporary Internet Files folder emptied.
Windows Temp folder emptied.
Java cache emptied.
File delete failed. C:\Documents and Settings\Compaq_Administrator\Local Settings\Application Data\Mozilla\Firefox\Profiles\grxwnioq.default\Cache\_CACHE_001_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Compaq_Administrator\Local Settings\Application Data\Mozilla\Firefox\Profiles\grxwnioq.default\Cache\_CACHE_002_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Compaq_Administrator\Local Settings\Application Data\Mozilla\Firefox\Profiles\grxwnioq.default\Cache\_CACHE_003_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Compaq_Administrator\Local Settings\Application Data\Mozilla\Firefox\Profiles\grxwnioq.default\Cache\_CACHE_MAP_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Compaq_Administrator\Local Settings\Application Data\Mozilla\Firefox\Profiles\grxwnioq.default\urlclassifier3.sqlite scheduled to be deleted on reboot.
FireFox cache emptied.
Temp folders emptied.
Explorer started successfully

OTMoveIt3 by OldTimer - Version 1.0.5.0 log created on 10242008_222011


And the LopR log…



——————–\\ Lop S&D 4.2.4-7 XP/Vista

Microsoft Windows XP Professional ( v5.1.2600 ) Service Pack 2
X86-based PC ( Uniprocessor Free : AMD Athlon™ 64 Processor 3800+ )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : Compaq_Administrator ( Administrator )
BOOT : Normal boot
Firewall : Norton Internet Worm Protection 2006 (Not Activated)
C:\ (Local Disk) - NTFS - Total : 224 Go Free : 20 Go
D:\ (Local Disk) - FAT32 - Total : 8 Go Free : 0 Go
E:\ (CD or DVD)
F:\ (USB)
G:\ (USB)
H:\ (USB)
I:\ (USB)
J:\ (CD or DVD) - CDFS - Total : 0 Go Free : 0 Go

"C:\Lop SD" ( MAJ : 23-10-2008|23:15 )
Option : [1] ( Fri 10/24/2008|22:21 )

——————–\\ Listing folders in APPLIC~1

[11/14/2005|02:04] C:\DOCUME~1\ADMINI~1\APPLIC~1\ Identities
[05/04/2006|11:20] C:\DOCUME~1\ADMINI~1\APPLIC~1\ Intuit
[09/16/2007|12:20] C:\DOCUME~1\ADMINI~1\APPLIC~1\ Microsoft
[05/04/2006|11:08] C:\DOCUME~1\ADMINI~1\APPLIC~1\ Real

[01/23/2008|02:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ {CFAB4006-0AE0-414D-866A-DCB2C46553CF}
[09/19/2007|07:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ Adobe
[06/18/2008|06:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ Apple
[11/26/2006|07:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ Apple Computer
[09/16/2007|12:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ avg7
[08/18/2007|04:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ BVRP Software
[05/04/2006|11:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ CyberLink
[05/04/2006|11:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ Digital Interactive Systems Corporation
[08/23/2008|12:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ FlashFXP
[09/19/2007|07:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ FLEXnet
[05/04/2006|11:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ Hewlett-Packard
[08/30/2008|01:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ IJJIGame
[02/03/2007|03:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ InstallShield
[05/04/2006|11:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ Intuit
[09/16/2007|12:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ Last.fm
[09/19/2008|03:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ Microsoft
[10/07/2008|04:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ Microsoft Help
[12/02/2006|07:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ NVIDIA
[08/26/2006|08:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ nView_Profiles
[05/04/2006|10:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ SBSI
[08/17/2007|01:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ Skype
[05/04/2006|11:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ Sonic
[07/15/2007|03:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ Spybot - Search & Destroy
[10/02/2006|03:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ Symantec
[07/20/2007|10:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ TEMP
[12/15/2007|05:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ Viewpoint
[08/17/2006|05:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ Windows Genuine Advantage

[02/18/2008|02:18] C:\DOCUME~1\COMPAQ~1\APPLIC~1\ Adobe
[08/20/2008|03:36] C:\DOCUME~1\COMPAQ~1\APPLIC~1\ AdobeUM
[01/02/2007|07:49] C:\DOCUME~1\COMPAQ~1\APPLIC~1\ Aim
[11/26/2006|07:44] C:\DOCUME~1\COMPAQ~1\APPLIC~1\ Apple Computer
[09/16/2007|12:21] C:\DOCUME~1\COMPAQ~1\APPLIC~1\ AVG7
[02/09/2008|06:54] C:\DOCUME~1\COMPAQ~1\APPLIC~1\ FrostWire
[12/27/2006|08:19] C:\DOCUME~1\COMPAQ~1\APPLIC~1\ funkitron
[09/12/2008|09:14] C:\DOCUME~1\COMPAQ~1\APPLIC~1\ Hamachi
[08/17/2006|02:16] C:\DOCUME~1\COMPAQ~1\APPLIC~1\ Help
[11/17/2006|12:59] C:\DOCUME~1\COMPAQ~1\APPLIC~1\ HP
[08/15/2006|05:29] C:\DOCUME~1\COMPAQ~1\APPLIC~1\ HPQ
[11/14/2005|02:04] C:\DOCUME~1\COMPAQ~1\APPLIC~1\ Identities
[08/30/2008|06:39] C:\DOCUME~1\COMPAQ~1\APPLIC~1\ ijjigame
[08/18/2007|03:31] C:\DOCUME~1\COMPAQ~1\APPLIC~1\ InstallShield
[05/04/2006|11:20] C:\DOCUME~1\COMPAQ~1\APPLIC~1\ Intuit
[01/27/2007|11:46] C:\DOCUME~1\COMPAQ~1\APPLIC~1\ Lavasoft
[10/01/2006|11:02] C:\DOCUME~1\COMPAQ~1\APPLIC~1\ Leadertech
[10/15/2008|11:24] C:\DOCUME~1\COMPAQ~1\APPLIC~1\ LimeWire
[08/18/2006|11:50] C:\DOCUME~1\COMPAQ~1\APPLIC~1\ Macromedia
[12/10/2006|10:25] C:\DOCUME~1\COMPAQ~1\APPLIC~1\ Media Player Classic
[10/07/2008|04:57] C:\DOCUME~1\COMPAQ~1\APPLIC~1\ Microsoft
[08/19/2008|07:57] C:\DOCUME~1\COMPAQ~1\APPLIC~1\ MiniLyrics
[12/03/2007|06:12] C:\DOCUME~1\COMPAQ~1\APPLIC~1\ Move Networks
[06/25/2008|05:00] C:\DOCUME~1\COMPAQ~1\APPLIC~1\ Mozilla
[10/14/2007|12:02] C:\DOCUME~1\COMPAQ~1\APPLIC~1\ My Games
[11/04/2007|06:04] C:\DOCUME~1\COMPAQ~1\APPLIC~1\ Nexon
[02/03/2007|03:20] C:\DOCUME~1\COMPAQ~1\APPLIC~1\ Nova Development
[10/22/2006|04:34] C:\DOCUME~1\COMPAQ~1\APPLIC~1\ PC Tools
[11/06/2007|12:48] C:\DOCUME~1\COMPAQ~1\APPLIC~1\ Real
[09/23/2008|10:07] C:\DOCUME~1\COMPAQ~1\APPLIC~1\ SecuROM
[07/29/2008|04:34] C:\DOCUME~1\COMPAQ~1\APPLIC~1\ Skype
[07/22/2008|12:35] C:\DOCUME~1\COMPAQ~1\APPLIC~1\ Soldat
[10/01/2006|11:03] C:\DOCUME~1\COMPAQ~1\APPLIC~1\ Sonic
[09/19/2008|03:24] C:\DOCUME~1\COMPAQ~1\APPLIC~1\ SPORE
[08/15/2006|07:00] C:\DOCUME~1\COMPAQ~1\APPLIC~1\ Sun
[01/27/2007|11:52] C:\DOCUME~1\COMPAQ~1\APPLIC~1\ System Requirements Lab
[12/28/2006|12:47] C:\DOCUME~1\COMPAQ~1\APPLIC~1\ Talkback
[02/03/2007|04:04] C:\DOCUME~1\COMPAQ~1\APPLIC~1\ Template
[10/21/2008|09:47] C:\DOCUME~1\COMPAQ~1\APPLIC~1\ U3
[10/23/2008|08:50] C:\DOCUME~1\COMPAQ~1\APPLIC~1\ uTorrent
[04/12/2007|03:38] C:\DOCUME~1\COMPAQ~1\APPLIC~1\ Ventrilo
[12/15/2007|05:11] C:\DOCUME~1\COMPAQ~1\APPLIC~1\ Viewpoint
[07/16/2008|07:27] C:\DOCUME~1\COMPAQ~1\APPLIC~1\ WinBatch
[08/22/2008|03:35] C:\DOCUME~1\COMPAQ~1\APPLIC~1\ XBMC
[10/15/2006|05:47] C:\DOCUME~1\COMPAQ~1\APPLIC~1\ Xfire

[11/14/2005|02:04] C:\DOCUME~1\DEFAUL~1\APPLIC~1\ Identities
[05/04/2006|11:20] C:\DOCUME~1\DEFAUL~1\APPLIC~1\ Intuit
[05/04/2006|11:46] C:\DOCUME~1\DEFAUL~1\APPLIC~1\ Microsoft
[05/04/2006|11:08] C:\DOCUME~1\DEFAUL~1\APPLIC~1\ Real

[12/27/2006|08:53] C:\DOCUME~1\Guest\APPLIC~1\ Aim
[11/14/2005|02:04] C:\DOCUME~1\Guest\APPLIC~1\ Identities
[05/04/2006|11:20] C:\DOCUME~1\Guest\APPLIC~1\ Intuit
[12/27/2006|08:53] C:\DOCUME~1\Guest\APPLIC~1\ Macromedia
[09/16/2007|12:20] C:\DOCUME~1\Guest\APPLIC~1\ Microsoft
[12/27/2006|08:53] C:\DOCUME~1\Guest\APPLIC~1\ Mozilla
[05/04/2006|11:08] C:\DOCUME~1\Guest\APPLIC~1\ Real
[12/28/2006|05:19] C:\DOCUME~1\Guest\APPLIC~1\ Sun
[12/28/2006|04:49] C:\DOCUME~1\Guest\APPLIC~1\ Talkback

[02/21/2007|03:19] C:\DOCUME~1\LOCALS~1\APPLIC~1\ AVG7
[01/21/2008|07:43] C:\DOCUME~1\LOCALS~1\APPLIC~1\ Microsoft

[09/16/2007|12:20] C:\DOCUME~1\NETWOR~1\APPLIC~1\ Microsoft

——————–\\ Scheduled Tasks located in C:\WINDOWS\Tasks

[10/21/2008 02:13 PM][–a——] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[10/24/2008 05:39 AM][–ah—–] C:\WINDOWS\tasks\SA.DAT
[08/10/2004 12:00 AM][-rah—–] C:\WINDOWS\tasks\desktop.ini

——————–\\ Listing Folders in C:\Program Files

[01/28/2007|01:32] C:\Program Files\ Activision
[02/08/2008|10:46] C:\Program Files\ Adobe
[07/21/2007|11:59] C:\Program Files\ AIM
[08/22/2008|06:19] C:\Program Files\ Alarm Clock
[10/08/2006|10:27] C:\Program Files\ Alcohol Soft
[06/23/2007|02:23] C:\Program Files\ AOD
[06/18/2008|06:39] C:\Program Files\ Apple Software Update
[12/05/2006|08:36] C:\Program Files\ Armadillo Run
[02/16/2008|12:07] C:\Program Files\ Avanquest update
[07/29/2007|08:18] C:\Program Files\ AviSynth 2.5
[12/27/2006|08:49] C:\Program Files\ AWS
[12/31/2006|05:34] C:\Program Files\ BitComet
[08/18/2007|05:28] C:\Program Files\ BitPim
[10/09/2008|12:52] C:\Program Files\ BlackIsle
[01/23/2008|03:20] C:\Program Files\ Blaze Media Pro
[11/13/2006|11:27] C:\Program Files\ Blockland
[06/18/2008|06:41] C:\Program Files\ Bonjour
[02/21/2007|12:37] C:\Program Files\ CCleaner
[12/11/2007|10:21] C:\Program Files\ CDex_150
[07/03/2008|03:12] C:\Program Files\ Combined Community Codec Pack
[10/23/2008|08:46] C:\Program Files\ Common Files
[05/04/2006|11:24] C:\Program Files\ Compaq Connections
[11/11/2005|11:56] C:\Program Files\ ComPlus Applications
[02/21/2007|02:49] C:\Program Files\ DAEMON Tools
[06/05/2007|08:49] C:\Program Files\ Diablo II
[08/22/2008|04:05] C:\Program Files\ DivX
[07/06/2007|07:29] C:\Program Files\ EA GAMES
[02/20/2007|03:26] C:\Program Files\ ElastoMania111
[09/19/2008|03:16] C:\Program Files\ Electronic Arts
[05/04/2006|10:40] C:\Program Files\ EnglishOtto
[03/22/2008|01:43] C:\Program Files\ EPSON
[08/15/2007|08:36] C:\Program Files\ eRightSoft
[08/27/2008|05:12] C:\Program Files\ ffdshow
[08/15/2006|10:28] C:\Program Files\ filesubmit
[01/11/2007|01:18] C:\Program Files\ Finale 2006
[10/13/2007|11:52] C:\Program Files\ Firaxis Games
[08/23/2008|12:17] C:\Program Files\ FlashFXP
[06/07/2007|05:43] C:\Program Files\ FLV Player
[04/29/2007|10:19] C:\Program Files\ Fotoshoop
[02/20/2008|03:18] C:\Program Files\ FrostWire
[08/29/2006|05:12] C:\Program Files\ Game Cam
[08/28/2007|10:02] C:\Program Files\ Game_Maker7
[05/04/2006|10:40] C:\Program Files\ GemMaster
[06/03/2007|08:20] C:\Program Files\ GoldWave
[08/15/2006|05:06] C:\Program Files\ Google
[09/16/2007|12:21] C:\Program Files\ Grisoft
[10/14/2007|01:29] C:\Program Files\ Hamachi
[05/24/2007|02:52] C:\Program Files\ Hewlett-Packard
[10/22/2008|09:34] C:\Program Files\ Hot Keyboard Pro
[05/24/2007|02:54] C:\Program Files\ HP
[12/02/2006|03:57] C:\Program Files\ HP Games
[05/07/2008|02:16] C:\Program Files\ iDump
[09/16/2006|07:22] C:\Program Files\ Image-Line
[09/23/2007|05:08] C:\Program Files\ Incomplete
[10/08/2006|10:38] C:\Program Files\ Infogrames Interactive
[09/19/2008|03:16] C:\Program Files\ InstallShield Installation Information
[10/23/2008|08:42] C:\Program Files\ Internet Explorer
[06/18/2008|06:42] C:\Program Files\ iPod
[06/18/2008|06:42] C:\Program Files\ iTunes
[01/21/2008|04:42] C:\Program Files\ Java
[11/10/2007|09:24] C:\Program Files\ JelloCar
[08/16/2008|04:46] C:\Program Files\ JFK Reloaded
[02/23/2007|04:46] C:\Program Files\ Keyfinder Advanced 2007 (Trial Version)
[06/05/2008|10:49] C:\Program Files\ Last.fm
[01/27/2007|11:37] C:\Program Files\ Lavasoft
[09/25/2008|05:57] C:\Program Files\ LimeWire
[05/19/2007|03:44] C:\Program Files\ Lionhead Studios Ltd
[09/19/2007|06:56] C:\Program Files\ MagicISO
[08/14/2008|03:10] C:\Program Files\ Messenger
[11/14/2005|02:06] C:\Program Files\ microsoft frontpage
[05/04/2006|11:17] C:\Program Files\ Microsoft Money 2006
[04/24/2008|01:55] C:\Program Files\ Microsoft Office
[05/04/2006|11:18] C:\Program Files\ Microsoft Visual Studio
[04/24/2008|01:47] C:\Program Files\ Microsoft Visual Studio 8
[04/24/2008|01:56] C:\Program Files\ Microsoft Works
[06/05/2007|05:18] C:\Program Files\ Microsoft Works Suite 2002
[04/24/2008|01:52] C:\Program Files\ Microsoft.NET
[10/14/2006|10:57] C:\Program Files\ middle_man
[10/23/2008|03:41] C:\Program Files\ Minefield
[08/19/2008|07:58] C:\Program Files\ Minilyrics
[03/27/2008|02:28] C:\Program Files\ Motorola
[02/16/2008|12:08] C:\Program Files\ Motorola Phone Tools
[11/14/2005|02:07] C:\Program Files\ Movie Maker
[10/24/2008|10:18] C:\Program Files\ Mozilla Firefox
[04/24/2008|01:55] C:\Program Files\ MSBuild
[11/14/2005|02:07] C:\Program Files\ MSN
[05/04/2006|11:07] C:\Program Files\ MSN Encarta Standard
[11/14/2005|02:07] C:\Program Files\ MSN Gaming Zone
[10/08/2008|04:48] C:\Program Files\ MSN Messenger
[11/19/2006|04:00] C:\Program Files\ MSXML 4.0
[05/04/2006|11:08] C:\Program Files\ music_now
[11/14/2005|02:07] C:\Program Files\ NetMeeting
[05/04/2006|11:08] C:\Program Files\ Netscape
[01/23/2007|08:25] C:\Program Files\ NEXON
[02/03/2007|03:17] C:\Program Files\ Nova Development
[05/04/2006|11:31] C:\Program Files\ Online Services
[06/12/2007|07:56] C:\Program Files\ Outlook Express
[05/04/2006|11:27] C:\Program Files\ PC-Doctor 5 for Windows
[05/04/2006|11:27] C:\Program Files\ PC-Doctor for DOS
[08/19/2008|01:16] C:\Program Files\ Pocket Tanks Deluxe
[08/26/2006|09:45] C:\Program Files\ Power Tab Software
[07/13/2007|09:16] C:\Program Files\ Quicken
[06/18/2008|06:41] C:\Program Files\ QuickTime
[11/13/2006|07:55] C:\Program Files\ RTB
[01/21/2007|11:42] C:\Program Files\ SBaGen
[08/17/2007|01:51] C:\Program Files\ Skype
[12/02/2006|09:27] C:\Program Files\ Softnyx
[03/30/2007|07:45] C:\Program Files\ Sol Edit
[05/04/2006|11:13] C:\Program Files\ Sonic
[01/27/2007|11:39] C:\Program Files\ Spybot - Search & Destroy
[01/20/2007|05:02] C:\Program Files\ Spyware Doctor
[07/30/2008|06:07] C:\Program Files\ Steam
[10/23/2008|08:59] C:\Program Files\ StepMania
[10/22/2006|04:22] C:\Program Files\ Sunbelt Software
[11/02/2006|03:35] C:\Program Files\ Super DX-Ball Deluxe
[06/08/2008|02:26] C:\Program Files\ TallStick
[11/25/2006|09:51] C:\Program Files\ TGTSoft
[04/21/2007|03:44] C:\Program Files\ Toribash
[04/21/2007|04:58] C:\Program Files\ Toribash-2.1
[07/30/2008|02:56] C:\Program Files\ Toribash-2.5
[02/08/2008|10:25] C:\Program Files\ TVersity
[08/22/2008|05:05] C:\Program Files\ TVersity Codec Pack
[11/11/2005|11:56] C:\Program Files\ Uninstall Information
[08/07/2008|09:02] C:\Program Files\ uTorrent
[12/31/2006|05:40] C:\Program Files\ Valve
[04/12/2007|03:34] C:\Program Files\ Ventrilo
[02/18/2007|03:40] C:\Program Files\ Viewpoint
[12/02/2006|03:55] C:\Program Files\ VstPlugins
[05/04/2006|11:12] C:\Program Files\ WildTangent
[11/17/2007|02:01] C:\Program Files\ Winamp
[01/21/2008|07:42] C:\Program Files\ Windows Media Connect 2
[12/14/2006|07:44] C:\Program Files\ Windows Media Player
[11/14/2005|02:07] C:\Program Files\ Windows NT
[11/14/2005|02:08] C:\Program Files\ Windows Plus
[11/11/2005|11:56] C:\Program Files\ WindowsUpdate
[11/11/2006|11:13] C:\Program Files\ WinRAR
[10/28/2006|09:58] C:\Program Files\ Within a Deep Forest
[08/15/2006|10:30] C:\Program Files\ Wizet
[08/22/2008|03:44] C:\Program Files\ XBMC
[11/14/2005|02:08] C:\Program Files\ xerox
[09/14/2006|04:49] C:\Program Files\ Xfire

——————–\\ Listing Folders in C:\Program Files\Common Files

[09/19/2007|07:15] C:\Program Files\Common Files\ Adobe
[06/18/2008|06:39] C:\Program Files\Common Files\ Apple
[02/03/2007|03:18] C:\Program Files\Common Files\ Crystal Decisions
[04/24/2008|01:54] C:\Program Files\Common Files\ DESIGNER
[05/04/2006|11:03] C:\Program Files\Common Files\ HP
[06/09/2008|12:41] C:\Program Files\Common Files\ INCA Shared
[10/04/2006|05:30] C:\Program Files\Common Files\ InstallShield
[02/03/2007|03:18] C:\Program Files\Common Files\ InstallShield Shared
[05/04/2006|11:20] C:\Program Files\Common Files\ Intuit
[02/21/2007|12:49] C:\Program Files\Common Files\ Java
[05/04/2006|11:14] C:\Program Files\Common Files\ LightScribe
[09/19/2007|07:06] C:\Program Files\Common Files\ Macrovision Shared
[04/24/2008|01:55] C:\Program Files\Common Files\ Microsoft Shared
[08/18/2007|03:32] C:\Program Files\Common Files\ Motorola Shared
[11/14/2005|02:06] C:\Program Files\Common Files\ MSSoap
[11/30/2006|12:07] C:\Program Files\Common Files\ NSV
[11/14/2005|02:06] C:\Program Files\Common Files\ ODBC
[05/04/2006|11:20] C:\Program Files\Common Files\ Palo Alto Software
[11/06/2007|12:49] C:\Program Files\Common Files\ Real
[11/14/2005|02:06] C:\Program Files\Common Files\ Services
[08/17/2007|01:51] C:\Program Files\Common Files\ Skype
[05/04/2006|11:09] C:\Program Files\Common Files\ Sonic Shared
[11/14/2005|02:06] C:\Program Files\Common Files\ SpeechEngines
[05/04/2006|11:09] C:\Program Files\Common Files\ SureThing Shared
[10/22/2006|04:43] C:\Program Files\Common Files\ Symantec Shared
[06/12/2007|07:56] C:\Program Files\Common Files\ System
[01/27/2007|11:52] C:\Program Files\Common Files\ SystemRequirementsLab
[05/04/2006|11:13] C:\Program Files\Common Files\ TiVo Shared
[11/07/2006|06:39] C:\Program Files\Common Files\ Viewpoint
[04/12/2007|03:33] C:\Program Files\Common Files\ Wise Installation Wizard

——————–\\ Process

( 48 Processes )

… OK !

——————–\\ Searching with S_Lop

No Lop folder found !

——————–\\ Searching for Lop Files - Folders

No Lop folder found !

——————–\\ Searching within the Registry

….. OK !

——————–\\ Checking the Hosts file

Hosts file CLEAN


——————–\\ Searching for hidden files with Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-10-24 22:22:20
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes …
scanning hidden files …
scan completed successfully
hidden processes: 0
hidden files: 0

——————–\\ Searching for other infections

——————–\\ Cracks & Keygens ..

C:\DOCUME~1\COMPAQ~1\Application Data\uTorrent\Adobe After Effects CS3 Professional 2008 PC + Crack.torrent
C:\DOCUME~1\COMPAQ~1\Application Data\uTorrent\Microsoft Office 2007 Enterprise(no serial or activation required)+magic iso with crack-johonievision.rar.torrent
C:\DOCUME~1\COMPAQ~1\Desktop\Musick\The Moldy Peaches\The moldy peaches\Moldy Peaches_The Moldy Peaches_13_Who's Got the Crack.mp3
C:\DOCUME~1\COMPAQ~1\Desktop\Random\civ IV\Crack
C:\DOCUME~1\COMPAQ~1\Desktop\Random\civ IV\Crack\Civ4v109.exe
C:\DOCUME~1\COMPAQ~1\Desktop\Random\civ IV\Crack\Civilization4.exe
C:\DOCUME~1\COMPAQ~1\Desktop\Random\images\Wallpapers\crack-desk.jpg
C:\DOCUME~1\COMPAQ~1\Desktop\Random\images\Wallpapers\crack-desk2.jpg
C:\DOCUME~1\COMPAQ~1\Desktop\Random\Moo-vies and Teevee\Happiness\Adobe After Effects CS3 Professional 2008 PC + Crack
C:\DOCUME~1\COMPAQ~1\Desktop\Random\Moo-vies and Teevee\Happiness\Adobe After Effects CS3 Professional 2008 PC + Crack\Adobe After Effects CS3 Professional 2008 PC + Crack.uif
C:\DOCUME~1\COMPAQ~1\Desktop\Random\Photoshoop\Adobe_Photoshop_CS3_Extended_with_RegKey_Activation\Photoshop CS3 Extended Keygen + Activation ZWT.exe
C:\DOCUME~1\COMPAQ~1\Desktop\Random\stealin yo stuff\Microsoft Office 2007 Enterprise(no serial or activation required)+magic iso with crack-johonievision.rar
C:\DOCUME~1\COMPAQ~1\Desktop\Random\Style XP\StyleXP [cura]\Keygen.exe
C:\DOCUME~1\ALLUSE~1\Documents\spore\Spore-RELOADED\rld-spor\rld-spor\Spore\SporeBin\Crack
C:\DOCUME~1\ALLUSE~1\Documents\spore\Spore-RELOADED\rld-spor\rld-spor\Spore\SporeBin\Crack\Exception Report YOUR-4DACD0EA7 09-19-08 04.36.51 exception.txt
C:\DOCUME~1\ALLUSE~1\Documents\spore\Spore-RELOADED\rld-spor\rld-spor\Spore\SporeBin\Crack\Exception Report YOUR-4DACD0EA7 09-19-08 04.36.51 minidump.mdmp
C:\DOCUME~1\ALLUSE~1\Documents\spore\Spore-RELOADED\rld-spor\rld-spor\Spore\SporeBin\Crack\Exception Report YOUR-4DACD0EA7 09-19-08 06.00.59 exception.txt
C:\DOCUME~1\ALLUSE~1\Documents\spore\Spore-RELOADED\rld-spor\rld-spor\Spore\SporeBin\Crack\Exception Report YOUR-4DACD0EA7 09-19-08 06.00.59 minidump.mdmp
C:\DOCUME~1\ALLUSE~1\Documents\spore\Spore-RELOADED\rld-spor\rld-spor\Spore\SporeBin\Crack\Exception Report YOUR-4DACD0EA7 09-24-08 00.48.38 exception.txt
C:\DOCUME~1\ALLUSE~1\Documents\spore\Spore-RELOADED\rld-spor\rld-spor\Spore\SporeBin\Crack\Exception Report YOUR-4DACD0EA7 09-24-08 00.48.38 minidump.mdmp
C:\DOCUME~1\ALLUSE~1\Documents\spore\Spore-RELOADED\rld-spor\rld-spor\Spore\SporeBin\Crack\Exception Report YOUR-4DACD0EA7 09-24-08 01.09.50 exception.txt
C:\DOCUME~1\ALLUSE~1\Documents\spore\Spore-RELOADED\rld-spor\rld-spor\Spore\SporeBin\Crack\Exception Report YOUR-4DACD0EA7 09-24-08 01.09.50 minidump.mdmp
C:\DOCUME~1\ALLUSE~1\Documents\spore\Spore-RELOADED\rld-spor\rld-spor\Spore\SporeBin\Crack\Exception Report YOUR-4DACD0EA7 09-24-08 01.33.50 exception.txt
C:\DOCUME~1\ALLUSE~1\Documents\spore\Spore-RELOADED\rld-spor\rld-spor\Spore\SporeBin\Crack\Exception Report YOUR-4DACD0EA7 09-24-08 01.33.50 minidump.mdmp
C:\DOCUME~1\ALLUSE~1\Documents\spore\Spore-RELOADED\rld-spor\rld-spor\Spore\SporeBin\Crack\Exception Report YOUR-4DACD0EA7 09-24-08 01.50.30 exception.txt
C:\DOCUME~1\ALLUSE~1\Documents\spore\Spore-RELOADED\rld-spor\rld-spor\Spore\SporeBin\Crack\Exception Report YOUR-4DACD0EA7 09-24-08 01.50.30 minidump.mdmp
C:\DOCUME~1\ALLUSE~1\Documents\spore\Spore-RELOADED\rld-spor\rld-spor\Spore\SporeBin\Crack\rld-spor.exe
C:\DOCUME~1\ALLUSE~1\Documents\spore\Spore-RELOADED\rld-spor\rld-spor\Spore\SporeBin\Crack\SporeApp.exe


[F:2][D:0]-> C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp
[F:1][D:0]-> C:\DOCUME~1\COMPAQ~1\Cookies
[F:2][D:0]-> C:\DOCUME~1\COMPAQ~1\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - Fri 10/24/2008|22:25 - Option : [1]

——————–\\ Scan completed at 22:25:00
Post #6
You got infected because you downloaded cracks

Please download the OTMoveIt3 by OldTimer or from here.
  • Save it to your desktop.
  • Please double-click OTMoveIt3.exe to run it. (Note: If you are running on Vista, right-click on the file and choose Run As Administrator).
  • Copy the lines in the codebox below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose Copy):

    :Processes
explorer.exe

:Services

:Reg

:Files
C:\DOCUME~1\COMPAQ~1\Application Data\uTorrent\Adobe After Effects CS3 Professional 2008 PC + Crack.torrent
C:\DOCUME~1\COMPAQ~1\Application Data\uTorrent\Microsoft Office 2007 Enterprise(no serial or activation required)+magic iso with crack-johonievision.rar.torrent
C:\DOCUME~1\COMPAQ~1\Desktop\Random\civ IV\Crack
C:\DOCUME~1\COMPAQ~1\Desktop\Random\Moo-vies and Teevee\Happiness\Adobe After Effects CS3 Professional 2008 PC + Crack
C:\DOCUME~1\COMPAQ~1\Desktop\Random\Photoshoop\Adobe_Photoshop_CS3_Extended_with_RegKey_Activation\Photoshop CS3 Extended Keygen + Activation ZWT.exe
C:\DOCUME~1\COMPAQ~1\Desktop\Random\stealin yo stuff\Microsoft Office 2007 Enterprise(no serial or activation required)+magic iso with crack-johonievision.rar
C:\DOCUME~1\COMPAQ~1\Desktop\Random\Style XP\StyleXP [cura]\Keygen.exe
C:\DOCUME~1\ALLUSE~1\Documents\spore\Spore-RELOADED\rld-spor\rld-spor\Spore\SporeBin\Crack



:Commands
[purity]
[emptytemp]
[start explorer]
[Reboot]
  • Return to OTMoveIt3, right click in the "Paste Instructions for Items to be Moved" window (under the yellow bar) and choose Paste.
  • Click the red Moveit! button.
  • Copy everything in the Results window (under the green bar) to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy), and paste it in your next reply.
  • Close OTMoveIt3
Note: If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes. In this case, after the reboot, open Notepad (Start->All Programs->Accessories->Notepad), click File->Open, in the File Name box enter *.log and press the Enter key, navigate to the C:\_OTMoveIt\MovedFiles folder, and open the newest .log file present, and copy/paste the contents of that document back here in your next post.



Please download Malwarebytes' Anti-Malware from Here or Here

Double Click mbam-setup.exe to install the application.
  • Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select "Perform Quick Scan", then click Scan.
  • The scan may take some time to finish,so please be patient.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Make sure that everything is checked, and click Remove Selected.
  • When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
  • The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
  • Copy&Paste the entire report in your next reply.
Extra Note:
If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediatly.



Go to Kaspersky website and perform an online antivirus scan.

  • Read through the requirements and privacy statement and click on Accept button.
  • It will start downloading and installing the scanner and virus definitions. You will be prompted to install an application from Kaspersky. Click Run.
  • When the downloads have finished, click on Settings.
  • Make sure these boxes are checked (ticked). If they are not, please tick them and click on the Save button:
    • Spyware, Adware, Dialers, and other potentially dangerous programs
      Archives
      Mail databases
  • Click on My Computer under Scan.
  • Once the scan is complete, it will display the results. Click on View Scan Report.
  • You will see a list of infected items there. Click on Save Report As….
  • Save this report to a convenient place. Change the Files of type to Text file (.txt) before clicking on the Save button.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI